PyPi: Timesketch

CVE-2019-11324

Transitive

Safety vulnerability ID: 72884

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 18, 2019 Updated at Dec 14, 2024
Scan your Python projects for vulnerabilities →

Advisory

Timesketch upgrade urllib3 from version 1.22 to 1.24.1 to address CVE-2019-11324 vulnerability.

Affected package

timesketch

Latest version: 20241129

Digital forensic timeline analysis

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Bug-Fix analyzers fetching active sessions by jkppr in https://github.com/google/timesketch/pull/3093

**Full Changelog**: https://github.com/google/timesketch/compare/20240508...20240508.1

20240508
What's Changed
* Save searches without results by jkppr in https://github.com/google/timesketch/pull/3060
* Bump nginx version by jkppr in https://github.com/google/timesketch/pull/3077
* tsdev.sh update by rocketeeer in https://github.com/google/timesketch/pull/3081
* Support for observables in Yeti analyzers by tomchop in https://github.com/google/timesketch/pull/3061
* Added check to invalid API endpoints to close issue 3005 by TedmanNguyen in https://github.com/google/timesketch/pull/3058
* Updating the documentation by jkppr in https://github.com/google/timesketch/pull/3057
* Remove sigma_rule_status.csv from Installation Helper Scripts by Aevyz in https://github.com/google/timesketch/pull/3063
* Update api-upload-data.md by berggren in https://github.com/google/timesketch/pull/3068
* Fix tsctl on a prod deployment by jkppr in https://github.com/google/timesketch/pull/3088
* UI build 20240508 by jkppr in https://github.com/google/timesketch/pull/3089

New Contributors
* Aevyz made their first contribution in https://github.com/google/timesketch/pull/3063
* rocketeeer made their first contribution in https://github.com/google/timesketch/pull/3081
* TedmanNguyen made their first contribution in https://github.com/google/timesketch/pull/3058

**Full Changelog**: https://github.com/google/timesketch/compare/20240328...20240508

20240328
> **Note**
Upgrading to this Timesketch version requires a database upgrade!
See https://timesketch.org/guides/admin/upgrade/ for more details.

What's Changed
* DFIQ new UI and navigation by berggren in https://github.com/google/timesketch/pull/3041
* User profile and settings support by berggren in https://github.com/google/timesketch/pull/3048
* Enhancements to Yeti indicators by tomchop in https://github.com/google/timesketch/pull/3038
* More precise field selection when searching by tomchop in https://github.com/google/timesketch/pull/3044
* Use subqueryload to make loading events with comments faster by tomchop in https://github.com/google/timesketch/pull/3049
* Improvements to the sigma handling by tomchop in https://github.com/google/timesketch/pull/3050
* Update run_analyzers in the api client by jkppr in https://github.com/google/timesketch/pull/3037
* Fix a bug in the feature_extraction analyzer by jkppr in https://github.com/google/timesketch/pull/3047

**Full Changelog**: https://github.com/google/timesketch/compare/20240207...20240328

20240207
What's Changed
* Collapsable left panel by berggren in https://github.com/google/timesketch/pull/3008
* Support for Large Language Model (LLM) services by berggren in https://github.com/google/timesketch/pull/3019
* Implement user management (create, list, get) via API by lo-chr in https://github.com/google/timesketch/pull/3024
* Setup frontend unit tests with vitest by Annoraaq in https://github.com/google/timesketch/pull/3013
* Fix failing Plaso uploads after 6 months by jkppr in https://github.com/google/timesketch/pull/3017
* Fix error handling in the API client by jkppr in https://github.com/google/timesketch/pull/3006
* Add optional TLS verification by tomchop in https://github.com/google/timesketch/pull/3016
* Yeti analyzer fix: use session object by tomchop in https://github.com/google/timesketch/pull/3020
* Adjust query for Yeti indicators by tomchop in https://github.com/google/timesketch/pull/3009
* Mark events with indicator's relevant_tags (Yeti) by tomchop in https://github.com/google/timesketch/pull/3022
* Bump cryptography from 41.0.4 to 41.0.6 by dependabot in https://github.com/google/timesketch/pull/2998
* SQLalchemy upgrade - step one by berggren in https://github.com/google/timesketch/pull/2979
* Fix: get and use access token for Yeti by tomchop in https://github.com/google/timesketch/pull/3010
* Adding form validation to prevent names > 255 char. by jkppr in https://github.com/google/timesketch/pull/3026
* Update black formatting by jkppr in https://github.com/google/timesketch/pull/3031
* Timesketch API client: Adding type check to prevent error. by jkppr in https://github.com/google/timesketch/pull/3030
* Fix double escaping in sigma_util causing yaml.parser.ParserError by lo-chr in https://github.com/google/timesketch/pull/3028
* Move "old UI" button by jkppr in https://github.com/google/timesketch/pull/3033
* UI build 20240207 by jkppr in https://github.com/google/timesketch/pull/3035

New Contributors
* lo-chr made their first contribution in https://github.com/google/timesketch/pull/3028

**Full Changelog**: https://github.com/google/timesketch/compare/20231206...20240207

20231206
What's Changed
* Left panel timeline management by Annoraaq in https://github.com/google/timesketch/pull/2999
* Extract Windows event logs messages attributes by roshanmaskey in https://github.com/google/timesketch/pull/2910
* API client: Return all field for analysis sessions by tomchop in https://github.com/google/timesketch/pull/2504
* Highlight DFIQ context card by berggren in https://github.com/google/timesketch/pull/2996
* Introduce (large) CSV import in e2e tests by jaegeral in https://github.com/google/timesketch/pull/2912
* "Add to Threat Intelligence" via context links by jkppr in https://github.com/google/timesketch/pull/2980
* Graph bug and layout fix by berggren in https://github.com/google/timesketch/pull/2994
* Feature extraction config for BITS and Terminal Services by roshanmaskey in https://github.com/google/timesketch/pull/2974
* Adjust default example text for yeti endpoint by tomchop in https://github.com/google/timesketch/pull/2963
* Adding a copy action to filter chips by JohannesLks in https://github.com/google/timesketch/pull/2990
* Update to the windows deployment script by coloradosarge in https://github.com/google/timesketch/pull/3000
* Adding and updating tooltips for icons by jkppr in https://github.com/google/timesketch/pull/2983
* Fix hidden text by jkppr in https://github.com/google/timesketch/pull/2965
* bug-fix for context links by jkppr in https://github.com/google/timesketch/pull/2962
* Update for upgrade documentation by jkppr in https://github.com/google/timesketch/pull/2967
* Removing old feature extractor analyzer by jkppr in https://github.com/google/timesketch/pull/2969
* Update for the context_links documentation by jkppr in https://github.com/google/timesketch/pull/2970
* Updating the feature extraction analyzer documentation by jkppr in https://github.com/google/timesketch/pull/2973
* [tests] Add jsonl e2e tests by jaegeral in https://github.com/google/timesketch/pull/2976
* Fix vue dependency issues with "v-calendar" by jkppr in https://github.com/google/timesketch/pull/2989
* Mute noisy info logging in the feature extraction analyzer by jkppr in https://github.com/google/timesketch/pull/2993
* New empty-state and left panel bugfix by berggren in https://github.com/google/timesketch/pull/2991
* Update the analyzer timeline picker by jkppr in https://github.com/google/timesketch/pull/3001
* UI build 20231206 by jkppr in https://github.com/google/timesketch/pull/3002

New Contributors
* JohannesLks made their first contribution in https://github.com/google/timesketch/pull/2990
* coloradosarge made their first contribution in https://github.com/google/timesketch/pull/3000

**Full Changelog**: https://github.com/google/timesketch/compare/20231025...20231206

20231025
> **Note**
Upgrading to this Timesketch version requires a database upgrade!
See https://timesketch.org/guides/admin/upgrade/ for more details.

What's Changed
* filter chip fixes by jkppr in https://github.com/google/timesketch/pull/2893
* Adding multi analyzer result support by jkppr in https://github.com/google/timesketch/pull/2894
* Fix CSV upload without timestamp_desc by jkppr in https://github.com/google/timesketch/pull/2896
* Bump cryptography from 41.0.3 to 41.0.4 by dependabot in https://github.com/google/timesketch/pull/2904
* Deprecate Sigma status CSV usage from code by jaegeral in https://github.com/google/timesketch/pull/2913
* Add intelligence command to the CLI client by jaegeral in https://github.com/google/timesketch/pull/2864
* UI build 2023-10-05 by jkppr in https://github.com/google/timesketch/pull/2926
* Fix missing plaso_formatters by jkppr in https://github.com/google/timesketch/pull/2933
* Refactor base layout by berggren in https://github.com/google/timesketch/pull/2929
* ui build 20231010 by jkppr in https://github.com/google/timesketch/pull/2934
* Fix 2908 tagger bug by jkppr in https://github.com/google/timesketch/pull/2935
* Update yeti analyzer by tomchop in https://github.com/google/timesketch/pull/2930
* Adjusting regular expressions for features extraction by tomchop in https://github.com/google/timesketch/pull/2932
* [Documentation] timesketch_client.TimesketchApi in api client documentation by jaegeral in https://github.com/google/timesketch/pull/2938
* Improvements to the Yeti analyzer by tomchop in https://github.com/google/timesketch/pull/2942
* Truncate timeline names in analyzer results by jkppr in https://github.com/google/timesketch/pull/2945
* API client method to delete Sigma rule by jaegeral in https://github.com/google/timesketch/pull/2924
* Fix missing sketchId in Search.vue by jkppr in https://github.com/google/timesketch/pull/2955
* Unfurl integration by jkppr in https://github.com/google/timesketch/pull/2897
* Copy saved search ID by jkppr in https://github.com/google/timesketch/pull/2956
* Support emojis in new UI by NightAcrobat777 in https://github.com/google/timesketch/pull/2951
* SSL/TLS support and authentication for SMTP by fazledyn-or in https://github.com/google/timesketch/pull/2940
* Instantiate side panel only once by berggren in https://github.com/google/timesketch/pull/2949
* Unit test to ensure invalid timestamp conversions do not occur by bwhelan212 in https://github.com/google/timesketch/pull/2954
* Add DFIQ context to SearchHistory by berggren in https://github.com/google/timesketch/pull/2957
* Sanitise HTML from Unfurl by berggren in https://github.com/google/timesketch/pull/2959
* Context link backwards compatibility & sanitation by jkppr in https://github.com/google/timesketch/pull/2958
* UI build 2023-10-25 by jkppr in https://github.com/google/timesketch/pull/2960

New Contributors
* NightAcrobat777 made their first contribution in https://github.com/google/timesketch/pull/2951
* fazledyn-or made their first contribution in https://github.com/google/timesketch/pull/2940
* bwhelan212 made their first contribution in https://github.com/google/timesketch/pull/2954

**Full Changelog**: https://github.com/google/timesketch/compare/20230913...20231025

20230913
What's Changed
* [Analyzers] Spelling errors by jaegeral in https://github.com/google/timesketch/pull/2860
* correct paramters in cli attributes method by jaegeral in https://github.com/google/timesketch/pull/2863
* Update troubleshooting.md by jaegeral in https://github.com/google/timesketch/pull/2866
* adding timeline info to the tsctl by jaegeral in https://github.com/google/timesketch/pull/2870
* Feature extraction for TI data in "Windows-Bits-Client" events by jkppr in https://github.com/google/timesketch/pull/2873
* Update Date chip to support milliseconds by sydp in https://github.com/google/timesketch/pull/2867
* Allow API port to listen on localhost by tomchop in https://github.com/google/timesketch/pull/2875
* Loading indicator active analyzers by Annoraaq in https://github.com/google/timesketch/pull/2855
* OpenSearch 2.x support by berggren in https://github.com/google/timesketch/pull/2876
* ui build 20230831 by jkppr in https://github.com/google/timesketch/pull/2878
* Bump cryptography from 41.0.2 to 41.0.3 by dependabot in https://github.com/google/timesketch/pull/2858
* Add TTY check for providing missing config values by ramo-j in https://github.com/google/timesketch/pull/2850
* Don't exit with error if user chooses not to start timesketch by pemontto in https://github.com/google/timesketch/pull/2857
* Export query result to CSV by berggren in https://github.com/google/timesketch/pull/2882
* Run analyzers only once per timeline by jkppr in https://github.com/google/timesketch/pull/2883
* Support overriding/extending Plaso formatter definitions by berggren in https://github.com/google/timesketch/pull/2881
* New UI build (automated) by berggren in https://github.com/google/timesketch/pull/2884
* Tag list refactor & bug fixes by jkppr in https://github.com/google/timesketch/pull/2886
* Event attribute include / exclude filters by jkppr in https://github.com/google/timesketch/pull/2888
* refactor verbose analyzer output by jkppr in https://github.com/google/timesketch/pull/2885
* Analyzer Output UI update by jkppr in https://github.com/google/timesketch/pull/2887
* Adding tag filter chips to sigma rules by jkppr in https://github.com/google/timesketch/pull/2890
* Search History graph cleanup by berggren in https://github.com/google/timesketch/pull/2891
* UI build 20230913 by jkppr in https://github.com/google/timesketch/pull/2892


**Full Changelog**: https://github.com/google/timesketch/compare/20230721...20230913

20230721
What's Changed
* fixes 2809 UI bug by jkppr in https://github.com/google/timesketch/pull/2810
* Timeline and Scenarios fixes + small UI fixes by berggren in https://github.com/google/timesketch/pull/2808
* Show selected event in context view by berggren in https://github.com/google/timesketch/pull/2811
* Consitent forms and cleaned up XML viewer by berggren in https://github.com/google/timesketch/pull/2812
* Remove ports from e2e-tests by berggren in https://github.com/google/timesketch/pull/2816
* Update Account Finder Analyzer by jkppr in https://github.com/google/timesketch/pull/2803
* Delete sketch and list archived sketches by berggren in https://github.com/google/timesketch/pull/2817
* Add json and tab output to CLI client by jaegeral in https://github.com/google/timesketch/pull/2818
* [CLI] Add `output-format` as cli wide argument by jaegeral in https://github.com/google/timesketch/pull/2819
* Update hashR analyzer by jkppr in https://github.com/google/timesketch/pull/2820
* [CLI] refactor to use central output-format by jaegeral in https://github.com/google/timesketch/pull/2821
* Support OpenSearch queries in DFIQ by berggren in https://github.com/google/timesketch/pull/2822
* Add Windows Lateral Movement DFIQ scenario by berggren in https://github.com/google/timesketch/pull/2823
* Adding hashR user documentation by jkppr in https://github.com/google/timesketch/pull/2824
* New UI build by berggren in https://github.com/google/timesketch/pull/2828
* Update tsdev.sh to add creation of api client and cli client by jaegeral in https://github.com/google/timesketch/pull/2830
* fix mkdocs warnings by jkppr in https://github.com/google/timesketch/pull/2832
* fix docs formatting by jkppr in https://github.com/google/timesketch/pull/2833
* Add a test case for conditions with multiple words in a Sigma rule by jaegeral in https://github.com/google/timesketch/pull/2835
* Always set active timelines by berggren in https://github.com/google/timesketch/pull/2838
* Preserve user defined filters by berggren in https://github.com/google/timesketch/pull/2840
* Support event list sorting (asc/desc) by berggren in https://github.com/google/timesketch/pull/2843
* Rework comments by jkppr in https://github.com/google/timesketch/pull/2845
* Upgrade to PyYAML 6.0.1 and NodeJS 18 by berggren in https://github.com/google/timesketch/pull/2853
* Bump cryptography from 41.0.0 to 41.0.2 by dependabot in https://github.com/google/timesketch/pull/2844
* Documentation updates for analyzers by jkppr in https://github.com/google/timesketch/pull/2851
* Add timesketch analyze results to the CLI client by jaegeral in https://github.com/google/timesketch/pull/2846
* Manage sketch attributes in the CLI client by jaegeral in https://github.com/google/timesketch/pull/2841
* New UI build and update version numbers by berggren in https://github.com/google/timesketch/pull/2854


**Full Changelog**: https://github.com/google/timesketch/compare/20230628...20230721

20230628
What's Changed
* Update changelog by berggren in https://github.com/google/timesketch/pull/2768
* Scenarios model refactor by berggren in https://github.com/google/timesketch/pull/2672
* Ssh bruteforce analyzer by roshanmaskey in https://github.com/google/timesketch/pull/2769
* Add missing dependency for e2e container by berggren in https://github.com/google/timesketch/pull/2783
* 🐛 Handle None response from ip2geo by pemontto in https://github.com/google/timesketch/pull/2770
* Fix 2784 - pandas.read_csv arguments by jkppr in https://github.com/google/timesketch/pull/2785
* Add tzdata to all container builds by berggren in https://github.com/google/timesketch/pull/2788
* Fix for 2738 - Analyzer not in AnalyzerList by jkppr in https://github.com/google/timesketch/pull/2786
* Fixing 2393 - analysis of broken timelines by jkppr in https://github.com/google/timesketch/pull/2787
* Helm k8s by wajihyassine in https://github.com/google/timesketch/pull/2661
* Enable settings from environment (needs Flask 2.1+) by bpereto in https://github.com/google/timesketch/pull/2417
* Add 🐀 emoji for remote access tools by pemontto in https://github.com/google/timesketch/pull/2779
* Switch to Compose V2 by koromodako in https://github.com/google/timesketch/pull/2654
* Return user defined aggregation name when using the API client by sydp in https://github.com/google/timesketch/pull/2507
* Bump cryptography from 39.0.1 to 41.0.0 by dependabot in https://github.com/google/timesketch/pull/2778
* Bump pyjwt from 1.7.1 to 2.4.0 by dependabot in https://github.com/google/timesketch/pull/2192
* Update Helm README to refer to OSDFIR Infrastructure by wajihyassine in https://github.com/google/timesketch/pull/2790
* DFIQ support by berggren in https://github.com/google/timesketch/pull/2782
* Fix for importing small JSONL files by berggren in https://github.com/google/timesketch/pull/2793
* Restyle timeline chips by Annoraaq in https://github.com/google/timesketch/pull/2777
* Windows bruteforce analyzer by roshanmaskey in https://github.com/google/timesketch/pull/2792
* Automate verbose analyzer output metadata collection by jkppr in https://github.com/google/timesketch/pull/2798
* Update the event tags UI by jkppr in https://github.com/google/timesketch/pull/2805
* UI support for verbose analyzer output by jkppr in https://github.com/google/timesketch/pull/2797
* New UI build (automated) by berggren in https://github.com/google/timesketch/pull/2806

New Contributors
* bpereto made their first contribution in https://github.com/google/timesketch/pull/2417
* koromodako made their first contribution in https://github.com/google/timesketch/pull/2654

**Full Changelog**: https://github.com/google/timesketch/compare/20230526...20230628

20230526
Version 20230526

What's Changed
* Minor fixes/updates for AggregateDialog by sydp in https://github.com/google/timesketch/pull/2726
* Implicit String Fix by LX5321 in https://github.com/google/timesketch/pull/2650
* 🐛 Fix invalid sigma YAML by pemontto in https://github.com/google/timesketch/pull/2757
* Ensure that upload path is valid by berggren in https://github.com/google/timesketch/pull/2763
* Update to Flask 2.3.x and dependencies by berggren in https://github.com/google/timesketch/pull/2764
* New UI build (auto generated) by berggren in https://github.com/google/timesketch/pull/2767

New Contributors
* LX5321 made their first contribution in https://github.com/google/timesketch/pull/2650

**Full Changelog**: https://github.com/google/timesketch/compare/20230518...20230526

20230518
Timesketch release 20230518

What's Changed
* Added provider/context for uploads in the importer by kiddinn in https://github.com/google/timesketch/pull/1640
* Added provider/context to the CLI importer tool. by kiddinn in https://github.com/google/timesketch/pull/1644
* Added data source DB model by berggren in https://github.com/google/timesketch/pull/1642
* [API] introduce text --> sigma rule by jaegeral in https://github.com/google/timesketch/pull/1511
* Replace use of the csv library by pandas built-ins for data ingestion by rayanht in https://github.com/google/timesketch/pull/1534
* Added a Timesketch CLI client by berggren in https://github.com/google/timesketch/pull/1414
* Fixed couple of bugs in the sigma API and API Client by jaegeral in https://github.com/google/timesketch/pull/1646
* Docker: e2e / dev Sigma directory was not created before by jaegeral in https://github.com/google/timesketch/pull/1650
* Add the ability to use elasticsearch with SSL but without username/password authentication. by alexgoedeke in https://github.com/google/timesketch/pull/1645
* Mention end2end tests in dev guide by jaegeral in https://github.com/google/timesketch/pull/1651
* Another round of minor checks where unittests did not reflect the reality by jaegeral in https://github.com/google/timesketch/pull/1647
* fixing some lint issues in the the e2e Docker readme file by jaegeral in https://github.com/google/timesketch/pull/1653
* Bump sigmatools pypi version up by jaegeral in https://github.com/google/timesketch/pull/1633
* Added search templates to API and API client by kiddinn in https://github.com/google/timesketch/pull/1643
* Forgot to include the `searchtemplate.py` file in the last PR by kiddinn in https://github.com/google/timesketch/pull/1655
* Prometheus metric collection by berggren in https://github.com/google/timesketch/pull/1611
* Update 2021_timesketch_summit.md by jaegeral in https://github.com/google/timesketch/pull/1658
* Add external talk to the agenda by jaegeral in https://github.com/google/timesketch/pull/1660
* Fixed limitations in file size in the data source model. by kiddinn in https://github.com/google/timesketch/pull/1662
* Cleaned up some of the API code. by kiddinn in https://github.com/google/timesketch/pull/1657
* Made slight changes to the API client and REST API. by kiddinn in https://github.com/google/timesketch/pull/1664
* Update marked library by berggren in https://github.com/google/timesketch/pull/1668
* Remove reg form and update agenda by jaegeral in https://github.com/google/timesketch/pull/1672
* Added several enhancements to the importer and importer tasks. by kiddinn in https://github.com/google/timesketch/pull/1667
* Update 2021_timesketch_summit.md by jaegeral in https://github.com/google/timesketch/pull/1675
* Fixed a bug in data ingestion by kiddinn in https://github.com/google/timesketch/pull/1674
* Changed how we fill in NAN values while ingesting CSV files. by kiddinn in https://github.com/google/timesketch/pull/1676
* Update installation/upgrading docs by berggren in https://github.com/google/timesketch/pull/1678
* Added instructions on how to install a notebook container by kiddinn in https://github.com/google/timesketch/pull/1681
* Minor bug fixes to the API client by kiddinn in https://github.com/google/timesketch/pull/1686
* Added a new documentation site by berggren in https://github.com/google/timesketch/pull/1680
* Added a PR template. by kiddinn in https://github.com/google/timesketch/pull/1688
* Moved the PR template to a file instead of a folder. by kiddinn in https://github.com/google/timesketch/pull/1689
* Fixed few bugs in the API and alpha sorted saved searches by kiddinn in https://github.com/google/timesketch/pull/1691
* Fix broken links in README.md by stevengoossensB in https://github.com/google/timesketch/pull/1696
* [Tiny fix] Updated link for Docker installation process by toshiro92 in https://github.com/google/timesketch/pull/1702
* Update sigma.md by jaegeral in https://github.com/google/timesketch/pull/1705
* Changed how import errors are presented as well as ability to change passwords for the current user. by kiddinn in https://github.com/google/timesketch/pull/1700
* Changed how ES object is created to support auth without ssl, as well as minor bug fix in analyzer selection. by kiddinn in https://github.com/google/timesketch/pull/1710
* Changed upload behavior when appending to an already existing timeline by kiddinn in https://github.com/google/timesketch/pull/1712
* Use DataSource error message and UI cleanup by berggren in https://github.com/google/timesketch/pull/1713
* UI: Quick typo fix, and change provider string from the importer library by berggren in https://github.com/google/timesketch/pull/1714
* UI: Remove old error field by berggren in https://github.com/google/timesketch/pull/1719
* Always uniq index lists by berggren in https://github.com/google/timesketch/pull/1718
* Added upper memory limits to psort. by kiddinn in https://github.com/google/timesketch/pull/1722
* Allow other OIDC providers for authentication by asmirazali in https://github.com/google/timesketch/pull/1717
* Update developer-guide.md by jaegeral in https://github.com/google/timesketch/pull/1725
* UI: Fixing a bug in the Interval time filters by binglot in https://github.com/google/timesketch/pull/1598
* Moved the Notebook.md to learn/notebook.md to correspond to where the docs point to it. by kiddinn in https://github.com/google/timesketch/pull/1732
* Removed index analyzers and changed API/import client. by kiddinn in https://github.com/google/timesketch/pull/1723
* introduce tags in the sample rule and add tags from the rule to the s… by jaegeral in https://github.com/google/timesketch/pull/1735
* Add Get Timesketch client object into dev/notebook snippet by jaegeral in https://github.com/google/timesketch/pull/1737
* Set timeline ID in the GCS importer by berggren in https://github.com/google/timesketch/pull/1738
* fix the bug by jaegeral in https://github.com/google/timesketch/pull/1741
* Introduce os filsystem in sigma mapping by jaegeral in https://github.com/google/timesketch/pull/1734
* Sigma api e2e by jaegeral in https://github.com/google/timesketch/pull/1730
* Timeline name is not an optional field, changed text to avoid confusion by itsmvd in https://github.com/google/timesketch/pull/1747
* Added the ability to ingest data ingested by other means than through Timesketch backend by kiddinn in https://github.com/google/timesketch/pull/1383
* Prevent users from uploading unsupported file formats by itsmvd in https://github.com/google/timesketch/pull/1751
* Added generic mappings for CSV/JSON ingestion by lprat in https://github.com/google/timesketch/pull/1753
* Changed how duplicate attributes are displayed when adding manual eve… by warrinot in https://github.com/google/timesketch/pull/1758
* Bugfix: Error messages not showing in the UI by berggren in https://github.com/google/timesketch/pull/1765
* Search history by berggren in https://github.com/google/timesketch/pull/1757
* Refactor frontend by berggren in https://github.com/google/timesketch/pull/1746
* refactor and bugfix by berggren in https://github.com/google/timesketch/pull/1769
* Add metrics to SearchHistory actions by berggren in https://github.com/google/timesketch/pull/1770
* Bugfix: Navigation error by berggren in https://github.com/google/timesketch/pull/1771
* Bugfix: Ensure correct root history node is fetched by berggren in https://github.com/google/timesketch/pull/1773
* Change default search operator by berggren in https://github.com/google/timesketch/pull/1775
* Bugfix: Navigation links by berggren in https://github.com/google/timesketch/pull/1778
* Fixed some links pointing to non-existing docs by warrinot in https://github.com/google/timesketch/pull/1776
* Bugfix: Not able to star events by berggren in https://github.com/google/timesketch/pull/1784
* Changed how sketch attributes are stored and read from datastore. by kiddinn in https://github.com/google/timesketch/pull/1789
* Broken link in getting started by jordanrule in https://github.com/google/timesketch/pull/1788
* Fixed a minor issue in the attribute REST API. by kiddinn in https://github.com/google/timesketch/pull/1790
* Changed how sketch attributes are handled. by kiddinn in https://github.com/google/timesketch/pull/1792
* UI: Expose sketch attributes by tomchop in https://github.com/google/timesketch/pull/1793
* Fix broken attribute count in navbar by tomchop in https://github.com/google/timesketch/pull/1795
* UI: Use prettier formatter consistently by berggren in https://github.com/google/timesketch/pull/1798
* UI: Expose sketch attributes through a dynamic table display component by tomchop in https://github.com/google/timesketch/pull/1796
* Added regular expressions into the tagging analyzer to provide more flexibility. by kiddinn in https://github.com/google/timesketch/pull/1768
* Add Youtube Channel and Twitter account to docs by jaegeral in https://github.com/google/timesketch/pull/1802
* Fix typo: encourage by nagytam in https://github.com/google/timesketch/pull/1799
* Updated Sigma tagging, few improvements by jaegeral in https://github.com/google/timesketch/pull/1766
* Added a data analyzer by kiddinn in https://github.com/google/timesketch/pull/1791
* Sigma verify tool improv by jaegeral in https://github.com/google/timesketch/pull/1804
* Added a small logger statement in the importer client. by kiddinn in https://github.com/google/timesketch/pull/1806
* Add additional regexes to extract IP addresses from sshd messages by itsmvd in https://github.com/google/timesketch/pull/1809
* Update developer guide by tomchop in https://github.com/google/timesketch/pull/1808
* Change default font by berggren in https://github.com/google/timesketch/pull/1823
* Fix bug in tagger analyzer by itsmvd in https://github.com/google/timesketch/pull/1821
* UI: Search autocomplete and dropdown by berggren in https://github.com/google/timesketch/pull/1838
* UI: Interactive histogram by berggren in https://github.com/google/timesketch/pull/1836
* Fix to Time Filter Removal behavior by binglot in https://github.com/google/timesketch/pull/1843
* UI: New build by berggren in https://github.com/google/timesketch/pull/1844
* Check for history node by berggren in https://github.com/google/timesketch/pull/1847
* TsDynamicTable now has links pointing back to searches in sketch. by tomchop in https://github.com/google/timesketch/pull/1831
* Add intel from explore by tomchop in https://github.com/google/timesketch/pull/1857
* Extend SSH regex by itsmvd in https://github.com/google/timesketch/pull/1861
* UX local dev doc updates by jaegeral in https://github.com/google/timesketch/pull/1862
* Remove capitalize from event list by jaegeral in https://github.com/google/timesketch/pull/1864
* Fix formatting error in documentation by jaegeral in https://github.com/google/timesketch/pull/1866
* Copy to clipboard for EventListRow and EvetlistRowDetail by jaegeral in https://github.com/google/timesketch/pull/1845
* Mention WTF_CSRF_TIME_LIMIT in timesketch.conf by jaegeral in https://github.com/google/timesketch/pull/1870
* Add sysadmin guide to the documentation by jaegeral in https://github.com/google/timesketch/pull/1865
* Update timesketch_importer.py by jaegeral in https://github.com/google/timesketch/pull/1873
* Make access to intelligence attributes safer by tomchop in https://github.com/google/timesketch/pull/1882
* Don't convert datetime string in output (datetime picker widget) by berggren in https://github.com/google/timesketch/pull/1889
* Extended tsctl.py to add users to a sketch by binglot in https://github.com/google/timesketch/pull/1886
* Bugfix for label filter by hkhalifa in https://github.com/google/timesketch/pull/1893
* Asynchronous update when adding timeline ID to events in bulk by gaelmuller in https://github.com/google/timesketch/pull/1879
* UI: Vertical 3-dots on Timeline Chips by binglot in https://github.com/google/timesketch/pull/1842
* GeoIP Analyzer by sydp in https://github.com/google/timesketch/pull/1888
* UI consistency by berggren in https://github.com/google/timesketch/pull/1896
* Expose Sigma rules overview and detail pages by jaegeral in https://github.com/google/timesketch/pull/1851
* Sigma: Rule detail inline with table rows by berggren in https://github.com/google/timesketch/pull/1897
* Bugfix: Highlight text shown twice by berggren in https://github.com/google/timesketch/pull/1900
* Geoip updates by sydp in https://github.com/google/timesketch/pull/1899
* 1895 bugfix copy buttons by jaegeral in https://github.com/google/timesketch/pull/1906
* Introduce a Timesketch roadmap doc and Sigma by jaegeral in https://github.com/google/timesketch/pull/1903
* ssh analyzer: Only create saved search if there are any sessions created by berggren in https://github.com/google/timesketch/pull/1909
* Fix: Sigma analyzer creates saved search and story even with 0 results by jaegeral in https://github.com/google/timesketch/pull/1910
* Remove mans from various docs by jaegeral in https://github.com/google/timesketch/pull/1912
* Improve Sigma analyzer exception logging message by jaegeral in https://github.com/google/timesketch/pull/1904
* Search history documentation by jaegeral in https://github.com/google/timesketch/pull/1917
* Buttons for back/forward in search history by berggren in https://github.com/google/timesketch/pull/1914
* New build by berggren in https://github.com/google/timesketch/pull/1918
* fix intel count by jaegeral in https://github.com/google/timesketch/pull/1920
* Bugfix: Tag background in light theme by berggren in https://github.com/google/timesketch/pull/1924
* Add timeline context menu on overview page by berggren in https://github.com/google/timesketch/pull/1923
* Corrected docstring in setup.py by joachimmetz in https://github.com/google/timesketch/pull/1926
* Microseconds since epoch for JSONL input data by berggren in https://github.com/google/timesketch/pull/1939
* Fixes for read_and_validate_csv by sydp in https://github.com/google/timesketch/pull/1905
* Update plaso.mappings by berggren in https://github.com/google/timesketch/pull/1941
* Bugfix for disappearing menubar by tomchop in https://github.com/google/timesketch/pull/1943
* initiatl sizing doc by jaegeral in https://github.com/google/timesketch/pull/1947
* Docs and docstring to list_sketches API by jaegeral in https://github.com/google/timesketch/pull/1945
* add GCP to sigma config file / mapping by jaegeral in https://github.com/google/timesketch/pull/1956
* Ability to modifiy elasticsearch client timeout value by rushattac in https://github.com/google/timesketch/pull/1849
* Multi analyzer workers by jaegeral in https://github.com/google/timesketch/pull/1958
* Multi analyzer - tagger and feature extractor by berggren in https://github.com/google/timesketch/pull/1960
* introduce multi analyzer to docs by jaegeral in https://github.com/google/timesketch/pull/1961
* New UI build by berggren in https://github.com/google/timesketch/pull/1965
* Bugfix: Set counter by berggren in https://github.com/google/timesketch/pull/1966
* Select multiple toggle start bug fix by rushattac in https://github.com/google/timesketch/pull/1964
* Sigma tagger bugfix for empty tags in rule by berggren in https://github.com/google/timesketch/pull/1967
* Added deploy_timesketch.ps1 by JouniMi in https://github.com/google/timesketch/pull/1953
* Fix IP regex by tomchop in https://github.com/google/timesketch/pull/1969
* Modify linux folder for sigma rules by jaegeral in https://github.com/google/timesketch/pull/1970
* Documentation on how to update docs site by berggren in https://github.com/google/timesketch/pull/1971
* Update review process for documentation by berggren in https://github.com/google/timesketch/pull/1972
* fix mkdocs and introduce a documentation howto in docs/ by jaegeral in https://github.com/google/timesketch/pull/1973
* Refactor documentation by jaegeral in https://github.com/google/timesketch/pull/1976
* Update mkdocs.yml and add plugin by berggren in https://github.com/google/timesketch/pull/1977
* Docs (timesketch.org) refactor by berggren in https://github.com/google/timesketch/pull/1980
* Remove nav and toc from main page by berggren in https://github.com/google/timesketch/pull/1982
* Refactor docs by berggren in https://github.com/google/timesketch/pull/1991
* Notebook docs refactor by berggren in https://github.com/google/timesketch/pull/1992
* Better UI dev by tomchop in https://github.com/google/timesketch/pull/1989
* Fix Sigma backslash issue by jaegeral in https://github.com/google/timesketch/pull/1968
* Sigma compose UI by jaegeral in https://github.com/google/timesketch/pull/1937
* Streamline dev server by berggren in https://github.com/google/timesketch/pull/1994
* New UI build by berggren in https://github.com/google/timesketch/pull/1995
* add ParentImage to the sigma mapping by jaegeral in https://github.com/google/timesketch/pull/1996
* Docs fixes by berggren in https://github.com/google/timesketch/pull/1993
* add restarting services to the doc by jaegeral in https://github.com/google/timesketch/pull/2004
* Expose new frontend development server (tcp:5001) by berggren in https://github.com/google/timesketch/pull/2005
* Update timesketch.conf by berggren in https://github.com/google/timesketch/pull/2006
* More API client examples in the dev documentation by jaegeral in https://github.com/google/timesketch/pull/2002
* Issue 1887 timefilters bug by binglot in https://github.com/google/timesketch/pull/2008
* fix csv of Sigma blocklist by jaegeral in https://github.com/google/timesketch/pull/2014
* another missing column in sigma blocklist by jaegeral in https://github.com/google/timesketch/pull/2015
* Fixed broken/outdated documentation URLs by jleaniz in https://github.com/google/timesketch/pull/2017
* add date search examples to search query guide by mark-hallman in https://github.com/google/timesketch/pull/2013
* s/zenmap/zmap by jaegeral in https://github.com/google/timesketch/pull/1997
* Create Intelligence Documentation by jaegeral in https://github.com/google/timesketch/pull/1984
* Unrecognized attributes get the "other" type by tomchop in https://github.com/google/timesketch/pull/2020
* Add unit tests for frontend IOC guessing by tomchop in https://github.com/google/timesketch/pull/2021
* More efficient IOC searching by tomchop in https://github.com/google/timesketch/pull/2026
* Generate graph for a specific timeline by berggren in https://github.com/google/timesketch/pull/2027
* UI build by berggren in https://github.com/google/timesketch/pull/2029
* make it clear to which ID the timeline is uploaded by jaegeral in https://github.com/google/timesketch/pull/2030
* Update sketch.py by itsmvd in https://github.com/google/timesketch/pull/2036
* Troubleshooting doc by jaegeral in https://github.com/google/timesketch/pull/2042
* how to scale ES by jaegeral in https://github.com/google/timesketch/pull/2040
* mention celery job checking by jaegeral in https://github.com/google/timesketch/pull/2046
* Delete and edit comments by hkhalifa in https://github.com/google/timesketch/pull/1885
* UI: Change the behavior of the "Star Toggle" button by binglot in https://github.com/google/timesketch/pull/2049
* Issue 1978: Fix limited list of Data Types by binglot in https://github.com/google/timesketch/pull/2055
* Update import-from-json-csv.md by jaegeral in https://github.com/google/timesketch/pull/2063
* Change how memory dedicated to ES's JVM is calculated by rgayon in https://github.com/google/timesketch/pull/2066
* Expose Analyzer Logs in the Analyzers tab by binglot in https://github.com/google/timesketch/pull/2057
* Add incompatible Sigma rules to the blocklist by jaegeral in https://github.com/google/timesketch/pull/2038
* Add search examples to the documentation by jaegeral in https://github.com/google/timesketch/pull/2067
* Typo by tomchop in https://github.com/google/timesketch/pull/2070
* Migrate to OpenSearch for dev environment by berggren in https://github.com/google/timesketch/pull/2083
* fix Timeksketch typo by garanews in https://github.com/google/timesketch/pull/2080
* Switch to OpenSearch for e2e tests by berggren in https://github.com/google/timesketch/pull/2085
* Switch to OpenSearch for release docker by berggren in https://github.com/google/timesketch/pull/2086
* Remove Elasticsearch from release docker config by berggren in https://github.com/google/timesketch/pull/2089
* Migrate to OpenSearch python client by berggren in https://github.com/google/timesketch/pull/2091
* Better intelligence view by tomchop in https://github.com/google/timesketch/pull/2045
* Introduce delete user to tsctl.py by LeoAndTheTree in https://github.com/google/timesketch/pull/2069
* 2033 sigma date unittest by jaegeral in https://github.com/google/timesketch/pull/2100
* bugfix 2097 by pydvlpr in https://github.com/google/timesketch/pull/2099
* Fix 2051 Sketch attributes deleted via the API cannot be re-added by an analyzer by jonathan-greig in https://github.com/google/timesketch/pull/2101
* GCP Logging Analyzer by jonathan-greig in https://github.com/google/timesketch/pull/2079
* Add intelligence page to user guide by tomchop in https://github.com/google/timesketch/pull/2106
* Added permissions change to opensearch data directory by ramo-j in https://github.com/google/timesketch/pull/2110
* Mention two blog post as reading recommendation by jaegeral in https://github.com/google/timesketch/pull/2107
* New UI build by berggren in https://github.com/google/timesketch/pull/2114
* Remove duplicates from sigma_config.yaml by ZloeSabo in https://github.com/google/timesketch/pull/2113
* Mention Common Windows EventLog question in Docu by jaegeral in https://github.com/google/timesketch/pull/2108
* Small typo in deployment script by jaegeral in https://github.com/google/timesketch/pull/2102
* Update TsIOCMenu.vue by itsmvd in https://github.com/google/timesketch/pull/2118
* Fix broken link to notebooks by jaegeral in https://github.com/google/timesketch/pull/2105
* Minor changes to intelligence navigation by tomchop in https://github.com/google/timesketch/pull/2116
* Issue2097 2 by pydvlpr in https://github.com/google/timesketch/pull/2104
* Dynamic tags in tagger analyzer by tomchop in https://github.com/google/timesketch/pull/2111
* Whitespace in Sigma Keywords by jaegeral in https://github.com/google/timesketch/pull/2071
* Fix for broken Pip package (upstream) by berggren in https://github.com/google/timesketch/pull/2133
* Support more datetime formats for time filters by sydp in https://github.com/google/timesketch/pull/2075
* Fix formating for nanosecond timestamps by sydp in https://github.com/google/timesketch/pull/2132
* Next generation UI framework by berggren in https://github.com/google/timesketch/pull/2119
* Add deprecated to sigma blocklist by jaegeral in https://github.com/google/timesketch/pull/2136
* typos new attempt by jaegeral in https://github.com/google/timesketch/pull/2138
* Better tag rendering in intelligence view by tomchop in https://github.com/google/timesketch/pull/2123
* Add contrib directory for analyzers by berggren in https://github.com/google/timesketch/pull/2141
* Serve Intelligence tag metadata via the API by tomchop in https://github.com/google/timesketch/pull/2140
* Scenarios: Datamodel and API by berggren in https://github.com/google/timesketch/pull/1936
* new UI build by berggren in https://github.com/google/timesketch/pull/2148
* Support subpath for serving frontend by berggren in https://github.com/google/timesketch/pull/2149
* Migrate to Flask 2.x by berggren in https://github.com/google/timesketch/pull/2154
* Fix: typo for documents. by digitalisx in https://github.com/google/timesketch/pull/2156
* Fix: typo for docs by digitalisx in https://github.com/google/timesketch/pull/2162
* Add CLI client documentation by berggren in https://github.com/google/timesketch/pull/2163
* Consistent formatting by berggren in https://github.com/google/timesketch/pull/2153
* CLI client bugfixes by berggren in https://github.com/google/timesketch/pull/2164
* Update install.md by shannaniggans in https://github.com/google/timesketch/pull/2160
* Make session sticky for API clients by berggren in https://github.com/google/timesketch/pull/2167
* Use of "Conditional Field Mappings" in Sigma by binglot in https://github.com/google/timesketch/pull/2169
* [Documentation] update tsctl command create-user by jaegeral in https://github.com/google/timesketch/pull/2172
* [Documentation] introduce debugging of test instructions by jaegeral in https://github.com/google/timesketch/pull/2174
* Add pylint to the dev docs by jaegeral in https://github.com/google/timesketch/pull/2178
* Sigma use in analyzer by jaegeral in https://github.com/google/timesketch/pull/2166
* fix path to ts config in UI dev guide by jaegeral in https://github.com/google/timesketch/pull/2175
* UI build by berggren in https://github.com/google/timesketch/pull/2179
* Update sigma_config.yaml by binglot in https://github.com/google/timesketch/pull/2180
* timesketch_cli_client.commands.search bug in timestamp handling by jonathan-greig in https://github.com/google/timesketch/pull/2186
* Fixed marked library import by anttitikkanen in https://github.com/google/timesketch/pull/2190
* adjust the Sigma documentation by jaegeral in https://github.com/google/timesketch/pull/2184
* add mutex to Sigma mapping by jaegeral in https://github.com/google/timesketch/pull/2181
* BigQuery Matcher Analyzer plugin by anttitikkanen in https://github.com/google/timesketch/pull/2131
* deprecate the word blocklist in sigma context and use status instead by jaegeral in https://github.com/google/timesketch/pull/2198
* Escape backslashes and spaces in generated OpenSearch queries by tomchop in https://github.com/google/timesketch/pull/2207
* CSV with wrong extension stopped on UI side by rishav-karanjit in https://github.com/google/timesketch/pull/2147
* Use all rules in the analyzer by jaegeral in https://github.com/google/timesketch/pull/2202
* s/add-user/create-user by jaegeral in https://github.com/google/timesketch/pull/2212
* Comment support in updated UI by berggren in https://github.com/google/timesketch/pull/2194
* Preview search results directly from intelligence tab by tomchop in https://github.com/google/timesketch/pull/2205
* [Sigma] Adding fs:bodyfile:entry to keep up with plaso output by jaegeral in https://github.com/google/timesketch/pull/2214
* Documentation refactor by berggren in https://github.com/google/timesketch/pull/2216
* Pinning the opensearch container to version 1.3.2. to fix 2195 by jkppr in https://github.com/google/timesketch/pull/2217
* [Sigma] Adding Syslog to mapping by jaegeral in https://github.com/google/timesketch/pull/2215
* Adjusted client.py to throw an error if no usable tty is found by ramo-j in https://github.com/google/timesketch/pull/2221
* Update Spelling Across docs by wcrum in https://github.com/google/timesketch/pull/2226
* [API client] Add get_event method to Sketch resource by sydp in https://github.com/google/timesketch/pull/2219
* Allow OIDC API clients to consume OAuth tokens from several clients by sa3eed3ed in https://github.com/google/timesketch/pull/2209
* add network/zeek/zeek_rdp_public_listener.yml to Sigma status csv by jaegeral in https://github.com/google/timesketch/pull/2227
* New UI build by berggren in https://github.com/google/timesketch/pull/2230
* Fixed a bug in the stories by kiddinn in https://github.com/google/timesketch/pull/2225
* OIDC: Handle multiple client ids by berggren in https://github.com/google/timesketch/pull/2232
* Add missing login_required decorators by jonathan-greig in https://github.com/google/timesketch/pull/2236
* Unit test test_invalid_algorithm_raises_jwt_validation_error failing in PPA tests by jonathan-greig in https://github.com/google/timesketch/pull/2239
* Read "requester" from the correct location in plaso metadata by anttitikkanen in https://github.com/google/timesketch/pull/2243
* Add a button in the intelligence view to to search for all IOCs by tomchop in https://github.com/google/timesketch/pull/2245
* Update sigma.md by jaegeral in https://github.com/google/timesketch/pull/2249
* Change link to upload timeline documentation in UI by jaegeral in https://github.com/google/timesketch/pull/2247
* fix handling of PLASO_UPPER_MEMORY_LIMIT by hur in https://github.com/google/timesketch/pull/2244
* UI 2255 by marcobrotto in https://github.com/google/timesketch/pull/2257
* timesketch/api/v1/resources/timeline.py s/GET/POST typo by jaegeral in https://github.com/google/timesketch/pull/2258
* Several bugfixes in intelligence view by tomchop in https://github.com/google/timesketch/pull/2254
* Tag colorization improvements by tomchop in https://github.com/google/timesketch/pull/2240
* Feature: Add new IOCs from the UI by tomchop in https://github.com/google/timesketch/pull/2256
* Bring back disappearing codebase by tomchop in https://github.com/google/timesketch/pull/2260
* Update dev README by Nexidian in https://github.com/google/timesketch/pull/2267
* Minor upload form refactor to prevent upload of empty files by Nexidian in https://github.com/google/timesketch/pull/2269
* fix missing mock in sigma_tagger_test.py by rushattac in https://github.com/google/timesketch/pull/2265
* Add script options and flag for starting container during deployment by harshalchaudhari35 in https://github.com/google/timesketch/pull/2220
* Fixes OpenSearch version reterival logic by rushattac in https://github.com/google/timesketch/pull/2189
* Add feature to allow a user to map missing CSV headers by marcobrotto in https://github.com/google/timesketch/pull/2261
* Fix broken e2e test - update psort args for Plaso 20220724 by jonathan-greig in https://github.com/google/timesketch/pull/2280
* 2276 feature extract doc by jaegeral in https://github.com/google/timesketch/pull/2277
* UI: Sketch list, overview, new side panel layout, pagination by berggren in https://github.com/google/timesketch/pull/2282
* improve Sigma documentation by jaegeral in https://github.com/google/timesketch/pull/2283
* Pylint doc by jaegeral in https://github.com/google/timesketch/pull/2285
* UI: Filter menu and save search dialog by berggren in https://github.com/google/timesketch/pull/2281
* Update getting-started.md by marcobrotto in https://github.com/google/timesketch/pull/2287
* Checkbox for multiple fields selection by marcobrotto in https://github.com/google/timesketch/pull/2278
* Fix redirect for OIDC logins by berggren in https://github.com/google/timesketch/pull/2290
* Build UI bundle by berggren in https://github.com/google/timesketch/pull/2291
* Change default value of use rule in Sigma analyzer by jaegeral in https://github.com/google/timesketch/pull/2292
* Enable UI v2 by berggren in https://github.com/google/timesketch/pull/2294
* Add build files for UI v2 by berggren in https://github.com/google/timesketch/pull/2295
* Allow complex tags in the Intelligence attribute by tomchop in https://github.com/google/timesketch/pull/2262
* Tsdev.sh: a script for fast frontend/frontend-ng development by marcobrotto in https://github.com/google/timesketch/pull/2298
* Sigma rule database model + tests by jaegeral in https://github.com/google/timesketch/pull/2296
* Exists search guide by jaegeral in https://github.com/google/timesketch/pull/2308
* s/sigma_blacklist.csv/sigma_rule_status.csv in contrib by jaegeral in https://github.com/google/timesketch/pull/2309
* .gitignore - Ignore Python build artifacts for api and cli clients by jonathan-greig in https://github.com/google/timesketch/pull/2311
* Proposed fix for Export Sketch feature which was not working. by hkhalifa in https://github.com/google/timesketch/pull/2316
* Add manual event to timelines by marcobrotto in https://github.com/google/timesketch/pull/2304
* hashR analyzer by jkppr in https://github.com/google/timesketch/pull/2266
* Search history tree generation by berggren in https://github.com/google/timesketch/pull/2320
* Add manual event by marcobrotto in https://github.com/google/timesketch/pull/2321
* Upload json/jsonl/plaso/csv button in frontend-ng by marcobrotto in https://github.com/google/timesketch/pull/2313
* Add Sigma Database to the API by jaegeral in https://github.com/google/timesketch/pull/2302
* docs: Fix a few typos by timgates42 in https://github.com/google/timesketch/pull/2330
* add vsvode and notebook checkpoints to .gitignore by jaegeral in https://github.com/google/timesketch/pull/2332
* Update plaso args by clowe-r7 in https://github.com/google/timesketch/pull/2300
* Wrap XML attributes in <pre> by marcobrotto in https://github.com/google/timesketch/pull/2327
* Left panel layout by berggren in https://github.com/google/timesketch/pull/2324
* UI: Selectable columns, star, tags by berggren in https://github.com/google/timesketch/pull/2286
* Bump numpy from 1.19.0 to 1.21.0 by dependabot in https://github.com/google/timesketch/pull/2135
* Upload UI with indexing progress information by marcobrotto in https://github.com/google/timesketch/pull/2326
* Extend datasource model schema by berggren in https://github.com/google/timesketch/pull/2342
* Updated Sigma support in the API client by jaegeral in https://github.com/google/timesketch/pull/2333
* Python Notebook to debug the most common Timesketch API by marcobrotto in https://github.com/google/timesketch/pull/2348
* DataSource error handling for Plaso files and upload bugfix with extension handling by marcobrotto in https://github.com/google/timesketch/pull/2343
* Extend Search Templates model to support user defined parameters by berggren in https://github.com/google/timesketch/pull/2349
* Remove doc_type from opensearch client code by berggren in https://github.com/google/timesketch/pull/2350
* Changelog 2022-09 by jaegeral in https://github.com/google/timesketch/pull/2358
* Modify Sigma analyzer / API Client / UX to use Database by jaegeral in https://github.com/google/timesketch/pull/2347
* Search template UI by berggren in https://github.com/google/timesketch/pull/2355
* UI: Scale to many timelines in the picker grid by berggren in https://github.com/google/timesketch/pull/2365
* Sigma UI and import command with tsctl by berggren in https://github.com/google/timesketch/pull/2366
* additions to tscl interacting with Sigma by jaegeral in https://github.com/google/timesketch/pull/2369
* Update frontend-development.md by jaegeral in https://github.com/google/timesketch/pull/2367
* Update docker images and CI tests to Ubuntu 22.04 by berggren in https://github.com/google/timesketch/pull/2372
* Python code formatter GH action by berggren in https://github.com/google/timesketch/pull/2374
* re-adding console.error(error.response.data) by jaegeral in https://github.com/google/timesketch/pull/2375
* New UIv2 build by berggren in https://github.com/google/timesketch/pull/2380
* Auto build: include all build files by berggren in https://github.com/google/timesketch/pull/2381
* UI: Handle legacy datasources by berggren in https://github.com/google/timesketch/pull/2382
* New build of old UI by berggren in https://github.com/google/timesketch/pull/2383
* Add flush interval parameter by Zawadidone in https://github.com/google/timesketch/pull/2319
* Refactor changelog by berggren in https://github.com/google/timesketch/pull/2385
* Add investigative scenario to sketch by berggren in https://github.com/google/timesketch/pull/2386
* Update tasks.py by Zawadidone in https://github.com/google/timesketch/pull/2391
* Check if root_node in search history is none by jaegeral in https://github.com/google/timesketch/pull/2389
* [API client] Add get_intelligence_attribute to sketch resource by itsmvd in https://github.com/google/timesketch/pull/2384
* New UI build by berggren in https://github.com/google/timesketch/pull/2392
* Optimize Yeti analyzer logic + some more changes by tomchop in https://github.com/google/timesketch/pull/2398
* Adding maxmind attribution for the geoip analyzer by jkppr in https://github.com/google/timesketch/pull/2406
* geoip attribution by jkppr in https://github.com/google/timesketch/pull/2407
* Migrate OOB flow to localhost flow for OAuth2 auth by jleaniz in https://github.com/google/timesketch/pull/2379
* Remove oob by berggren in https://github.com/google/timesketch/pull/2409
* Support for adding event attributes via the API by jonathan-greig in https://github.com/google/timesketch/pull/2229
* [Sigma] Update OriginalFileName mapping by jaegeral in https://github.com/google/timesketch/pull/2412
* Snackbar by berggren in https://github.com/google/timesketch/pull/2405
* use capitalize in currentUser in App.vue by jaegeral in https://github.com/google/timesketch/pull/2418
* Update SearchTemplates.vue to check if no searchTemplates are on a system by jaegeral in https://github.com/google/timesketch/pull/2419
* update Sigma doc to match the new Web UI by jaegeral in https://github.com/google/timesketch/pull/2427
* Remove unused service by berggren in https://github.com/google/timesketch/pull/2433
* Add e2e clarification for contributions by tomchop in https://github.com/google/timesketch/pull/2435
* [Sigma] ship some basic but broad rules with Timesketch by jaegeral in https://github.com/google/timesketch/pull/2430
* Scenarios and DFIQ functionality by berggren in https://github.com/google/timesketch/pull/2437
* Fix typo in cli.py by jaegeral in https://github.com/google/timesketch/pull/2438
* Ignore type errors running under Python 3.10 by berggren in https://github.com/google/timesketch/pull/2441
* Context lookup API endpoint part 1 by jkppr in https://github.com/google/timesketch/pull/2440
* Context lookup part 2 - front-end API client by jkppr in https://github.com/google/timesketch/pull/2445
* Add sketch info to tsctl by jaegeral in https://github.com/google/timesketch/pull/2442
* [tsctl] new command: tsctl info by jaegeral in https://github.com/google/timesketch/pull/2443
* Add warning if plaso is not installed to tsctl by jaegeral in https://github.com/google/timesketch/pull/2446
* refresh admin-cli documentation by jaegeral in https://github.com/google/timesketch/pull/2447
* Context lookup part 3 - front-end UI by jkppr in https://github.com/google/timesketch/pull/2448
* Context lookup part 4 - Documentation by jkppr in https://github.com/google/timesketch/pull/2450
* [Sigma] try catch block if crypto.randomUUID is not supported by jaegeral in https://github.com/google/timesketch/pull/2456
* Allow additional OIDC domains to access APIs when OAuth is used by sa3eed3ed in https://github.com/google/timesketch/pull/2421
* Docs update - new landing page by berggren in https://github.com/google/timesketch/pull/2460
* Scenarios conclusion by berggren in https://github.com/google/timesketch/pull/2451
* UI: Tweaks for consistent colors by berggren in https://github.com/google/timesketch/pull/2464
* Add proxy_read_timeout in gninx conf by lprat in https://github.com/google/timesketch/pull/2466
* remove prettytable from tsctl to reduce dependencies by jaegeral in https://github.com/google/timesketch/pull/2461
* Adding a trailing / to nginx.conf by jaegeral in https://github.com/google/timesketch/pull/2455
* MISP and Hashlookup analyzers by DavidCruciani in https://github.com/google/timesketch/pull/2429
* make black happy misp module by jaegeral in https://github.com/google/timesketch/pull/2470
* Frontend dev doc update by jaegeral in https://github.com/google/timesketch/pull/2469
* Update test plaso file by berggren in https://github.com/google/timesketch/pull/2473
* Add colorpicker and rename timeline by berggren in https://github.com/google/timesketch/pull/2472
* Add logout link by berggren in https://github.com/google/timesketch/pull/2496
* Rename sketch by berggren in https://github.com/google/timesketch/pull/2495
* Sigma add syslog:line to ssh data_types by jaegeral in https://github.com/google/timesketch/pull/2508
* Fixed Issue 2505 - interface BaseAnalyzer class name by roshanmaskey in https://github.com/google/timesketch/pull/2506
* Enable bulk edit by berggren in https://github.com/google/timesketch/pull/2497
* Add share dialog by berggren in https://github.com/google/timesketch/pull/2471
* Empty state by berggren in https://github.com/google/timesketch/pull/2501
* Make the web console a bit less verbose by rgayon in https://github.com/google/timesketch/pull/2513
* New UI build by berggren in https://github.com/google/timesketch/pull/2516
* Add LinkedIn search queries by tomchop in https://github.com/google/timesketch/pull/2514
* Indicator when sketch is loading by berggren in https://github.com/google/timesketch/pull/2517
* Edit timefilter by berggren in https://github.com/google/timesketch/pull/2510
* Removable chips by berggren in https://github.com/google/timesketch/pull/2519
* New UI build by berggren in https://github.com/google/timesketch/pull/2520
* SigmaStudio by jaegeral in https://github.com/google/timesketch/pull/2444
* Updates to the timesketch.org docs by jkppr in https://github.com/google/timesketch/pull/2529
* Frontend-ng a fixed id if crypto.randomUUID is not available by jaegeral in https://github.com/google/timesketch/pull/2537
* black format fixing by jaegeral in https://github.com/google/timesketch/pull/2538
* make Sigma util tests into dedicated test cases by jaegeral in https://github.com/google/timesketch/pull/2539
* Deprecate File based Sigma rules by jaegeral in https://github.com/google/timesketch/pull/2509
* [SigmaStudio]don't mutate the prop by jaegeral in https://github.com/google/timesketch/pull/2542
* 2023 02 08 new sigma doc and update Sigma notebook by jaegeral in https://github.com/google/timesketch/pull/2543
* [Docs] update Sigma create rule gif by jaegeral in https://github.com/google/timesketch/pull/2544
* 2022 02 09 changelog jan by jaegeral in https://github.com/google/timesketch/pull/2547
* sigma doc update, add screenshots by jaegeral in https://github.com/google/timesketch/pull/2548
* [tsctl] add option column to tsctl list-sigma-rules by jaegeral in https://github.com/google/timesketch/pull/2549
* Serve icons from local bundle by berggren in https://github.com/google/timesketch/pull/2546
* UI consistency and API resource naming by berggren in https://github.com/google/timesketch/pull/2532
* explorer view event action icon improvements by jkppr in https://github.com/google/timesketch/pull/2553
* Copy field name/value icons for the EventDetail component by jkppr in https://github.com/google/timesketch/pull/2556
* Add Context card for scenarios by berggren in https://github.com/google/timesketch/pull/2566
* New UI build by berggren in https://github.com/google/timesketch/pull/2570
* how to install dependencies for frontend-ng by jaegeral in https://github.com/google/timesketch/pull/2572
* Threat intel in new UI by berggren in https://github.com/google/timesketch/pull/2545
* Update features.yaml by itsmvd in https://github.com/google/timesketch/pull/2523
* admin-cli analyzer-stats function by jaegeral in https://github.com/google/timesketch/pull/2502
* Add retry logic to fetch_resource_data by tomchop in https://github.com/google/timesketch/pull/2552
* Link back to explore session by jkppr in https://github.com/google/timesketch/pull/2582
* UI update for the Left Panel by jkppr in https://github.com/google/timesketch/pull/2585
* Reusable EventList component by berggren in https://github.com/google/timesketch/pull/2592
* Port Graph to new UI by berggren in https://github.com/google/timesketch/pull/2587
* Graph eventlist by berggren in https://github.com/google/timesketch/pull/2595
* CLI: Add Tag to single event by jaegeral in https://github.com/google/timesketch/pull/2600
* Update sigmastudio snackbars by jkppr in https://github.com/google/timesketch/pull/2603
* Sigma rules to be deployed by default by jaegeral in https://github.com/google/timesketch/pull/2377
* Stories by berggren in https://github.com/google/timesketch/pull/2610
* Make tags reactive by berggren in https://github.com/google/timesketch/pull/2613
* Bugfix: Stories not loading saved search by berggren in https://github.com/google/timesketch/pull/2615
* Loading indicator for sigma rules by berggren in https://github.com/google/timesketch/pull/2616
* Add Plaso staging e2e tests by berggren in https://github.com/google/timesketch/pull/2618
* Bugfix: timeline url param support by berggren in https://github.com/google/timesketch/pull/2619
* [CLI] add a show_internal_columns and json output to the explore method… by jaegeral in https://github.com/google/timesketch/pull/2607
* [CLI] events group to add comments and tags to an event by jaegeral in https://github.com/google/timesketch/pull/2604
* Making timestamp leading value when importing a csv by jaegeral in https://github.com/google/timesketch/pull/2586
* Fix SSL verify behavior in API client by FabFaeb in https://github.com/google/timesketch/pull/2602
* Consistent UI interactions by berggren in https://github.com/google/timesketch/pull/2621
* Add docker configs to default paths of files and HTTP(S) ports by lprat in https://github.com/google/timesketch/pull/2011
* Add default arg to PLASO_PPA_TRACK by tomchop in https://github.com/google/timesketch/pull/2625
* Bugfix: Support new views, and don't edit on dblclick when in edit mode by berggren in https://github.com/google/timesketch/pull/2629
* Add plaso version to version endpoint by berggren in https://github.com/google/timesketch/pull/2631
* Sigma list speedup by jaegeral in https://github.com/google/timesketch/pull/2632
* [Docs] CLI client dev guide + 2023-03 changelog by jaegeral in https://github.com/google/timesketch/pull/2637
* Fix 2636 - expand the clickable area of EventList rows by jkppr in https://github.com/google/timesketch/pull/2639
* Sigma UI refactor by berggren in https://github.com/google/timesketch/pull/2642
* [Sigma API] remove enrich_sigma_rule_object from API and just use the util method by jaegeral in https://github.com/google/timesketch/pull/2634
* Left menu UI polish by berggren in https://github.com/google/timesketch/pull/2645
* Add Event Data Analytics/Aggregation Dialog by sydp in https://github.com/google/timesketch/pull/2622
* Corrected grammatical error in the install.md file by FazlOmar9 in https://github.com/google/timesketch/pull/2647
* [P17] Analyzer v2 UI by jkppr in https://github.com/google/timesketch/pull/2657
* Empty state for Scenarios tab by berggren in https://github.com/google/timesketch/pull/2656
* Make new UI the default by berggren in https://github.com/google/timesketch/pull/2662
* Remove hover for story eventlist by berggren in https://github.com/google/timesketch/pull/2664
* New UI build by berggren in https://github.com/google/timesketch/pull/2665
* unittsts, new test csv and update to utils.py by jaegeral in https://github.com/google/timesketch/pull/2668
* Handle CSV imports that's missing timestamp field by berggren in https://github.com/google/timesketch/pull/2669
* Remove timestamp check by berggren in https://github.com/google/timesketch/pull/2671
* Ignore invalid timelines by Annoraaq in https://github.com/google/timesketch/pull/2678
* Filter analyzer results by display_name by Annoraaq in https://github.com/google/timesketch/pull/2679
* Fix 2680 - tagging of events without a tag attribute by jkppr in https://github.com/google/timesketch/pull/2688
* Fix for the pagination problems by jkppr in https://github.com/google/timesketch/pull/2691
* new UI build by jkppr in https://github.com/google/timesketch/pull/2692
* filter analyzers by timeline by Annoraaq in https://github.com/google/timesketch/pull/2699
* Show active analyzers loading by Annoraaq in https://github.com/google/timesketch/pull/2700
* make it easier to use the --sketch flag by jaegeral in https://github.com/google/timesketch/pull/2711
* fixing failing tests by jkppr in https://github.com/google/timesketch/pull/2719
* Delete timeline by jkppr in https://github.com/google/timesketch/pull/2696
* Context Search by berggren in https://github.com/google/timesketch/pull/2715
* Search with no timeline selected by berggren in https://github.com/google/timesketch/pull/2707
* Fix alignment for left panel menu by berggren in https://github.com/google/timesketch/pull/2704
* Exit early if there is no cytoscape instance by berggren in https://github.com/google/timesketch/pull/2708
* [Analyzer] Sigma: NoneType error by jaegeral in https://github.com/google/timesketch/pull/2716
* Enable sketch archiving by berggren in https://github.com/google/timesketch/pull/2701
* Add context to timeline datasources by berggren in https://github.com/google/timesketch/pull/2702
* Fix count error for failed timelines by berggren in https://github.com/google/timesketch/pull/2712
* [CLI] adding event to a sketch by jaegeral in https://github.com/google/timesketch/pull/2599
* Fix active analyzer status check bug by jkppr in https://github.com/google/timesketch/pull/2722
* Untag event API resource by jaegeral in https://github.com/google/timesketch/pull/2724
* Updated Tagging UI by jkppr in https://github.com/google/timesketch/pull/2694
* Update to AnalyzerSessionActiveListResource API endpoint by jkppr in https://github.com/google/timesketch/pull/2725
* Saved View left panel fixes by berggren in https://github.com/google/timesketch/pull/2713
* API Client Typos and formatting by jaegeral in https://github.com/google/timesketch/pull/2731
* add untag_event and untag_events to API client by jaegeral in https://github.com/google/timesketch/pull/2729
* Update analyzer status sync UI by jkppr in https://github.com/google/timesketch/pull/2734
* Add remove_tag to CLI client by jaegeral in https://github.com/google/timesketch/pull/2732
* [Doc] add changelog for may, improve some other docs by jaegeral in https://github.com/google/timesketch/pull/2735
* update markdown index by jaegeral in https://github.com/google/timesketch/pull/2736
* [CLI] bugfix: respect --limit when using a saved_search by jaegeral in https://github.com/google/timesketch/pull/2737
* New Cytoscape component (remove vue-cytoscape wrapper dependency) by berggren in https://github.com/google/timesketch/pull/2733
* Don't use editable installs in github actions by jaegeral in https://github.com/google/timesketch/pull/2748
* SSH feature extractions by roshanmaskey in https://github.com/google/timesketch/pull/2744
* Windows login feature extraction by roshanmaskey in https://github.com/google/timesketch/pull/2745
* [CLI] Add Sigma list / describe to timesketch cli by jaegeral in https://github.com/google/timesketch/pull/2620
* Save SearchTemplates via YAML only by berggren in https://github.com/google/timesketch/pull/2750
* add more details to the timelines CLI command by jaegeral in https://github.com/google/timesketch/pull/2751
* Update troubleshooting.md by jaegeral in https://github.com/google/timesketch/pull/2756
* AnalyzerOutput and supporting classes by roshanmaskey in https://github.com/google/timesketch/pull/2706
* New ui build by berggren in https://github.com/google/timesketch/pull/2759
* Docker build with release tag by berggren in https://github.com/google/timesketch/pull/2760

New Contributors
* alexgoedeke made their first contribution in https://github.com/google/timesketch/pull/1645
* stevengoossensB made their first contribution in https://github.com/google/timesketch/pull/1696
* toshiro92 made their first contribution in https://github.com/google/timesketch/pull/1702
* asmirazali made their first contribution in https://github.com/google/timesketch/pull/1717
* warrinot made their first contribution in https://github.com/google/timesketch/pull/1758
* jordanrule made their first contribution in https://github.com/google/timesketch/pull/1788
* nagytam made their first contribution in https://github.com/google/timesketch/pull/1799
* hkhalifa made their first contribution in https://github.com/google/timesketch/pull/1893
* rushattac made their first contribution in https://github.com/google/timesketch/pull/1849
* JouniMi made their first contribution in https://github.com/google/timesketch/pull/1953
* jleaniz made their first contribution in https://github.com/google/timesketch/pull/2017
* mark-hallman made their first contribution in https://github.com/google/timesketch/pull/2013
* LeoAndTheTree made their first contribution in https://github.com/google/timesketch/pull/2069
* pydvlpr made their first contribution in https://github.com/google/timesketch/pull/2099
* jonathan-greig made their first contribution in https://github.com/google/timesketch/pull/2101
* ramo-j made their first contribution in https://github.com/google/timesketch/pull/2110
* ZloeSabo made their first contribution in https://github.com/google/timesketch/pull/2113
* digitalisx made their first contribution in https://github.com/google/timesketch/pull/2156
* shannaniggans made their first contribution in https://github.com/google/timesketch/pull/2160
* anttitikkanen made their first contribution in https://github.com/google/timesketch/pull/2190
* rishav-karanjit made their first contribution in https://github.com/google/timesketch/pull/2147
* wcrum made their first contribution in https://github.com/google/timesketch/pull/2226
* sa3eed3ed made their first contribution in https://github.com/google/timesketch/pull/2209
* hur made their first contribution in https://github.com/google/timesketch/pull/2244
* marcobrotto made their first contribution in https://github.com/google/timesketch/pull/2257
* Nexidian made their first contribution in https://github.com/google/timesketch/pull/2267
* harshalchaudhari35 made their first contribution in https://github.com/google/timesketch/pull/2220
* timgates42 made their first contribution in https://github.com/google/timesketch/pull/2330
* clowe-r7 made their first contribution in https://github.com/google/timesketch/pull/2300
* Zawadidone made their first contribution in https://github.com/google/timesketch/pull/2319
* DavidCruciani made their first contribution in https://github.com/google/timesketch/pull/2429
* FabFaeb made their first contribution in https://github.com/google/timesketch/pull/2602
* FazlOmar9 made their first contribution in https://github.com/google/timesketch/pull/2647

**Full Changelog**: https://github.com/google/timesketch/compare/20210224...20230518

20210224
Release 20210224

What's Changed
* Various updates to the API Client by kiddinn in https://github.com/google/timesketch/pull/1542
* Update SearchQueryGuide views by jaegeral in https://github.com/google/timesketch/pull/1550
* Fix remove_timeline_label() permission check by rgayon in https://github.com/google/timesketch/pull/1544
* Changes to dpkg configuration for release by joachimmetz in https://github.com/google/timesketch/pull/1546
* Adding additional sleep to e2e tests. by kiddinn in https://github.com/google/timesketch/pull/1551
* Move stories to metadata by berggren in https://github.com/google/timesketch/pull/1552
* Bugfix: Handle system generated stories by berggren in https://github.com/google/timesketch/pull/1553
* Update Axios package by berggren in https://github.com/google/timesketch/pull/1554
* Misc UI fixes by berggren in https://github.com/google/timesketch/pull/1555
* Timesketch summit 2021 by jaegeral in https://github.com/google/timesketch/pull/1557
* Changes to API and API client by kiddinn in https://github.com/google/timesketch/pull/1562
* Added new IP address related feature extractors by itsmvd in https://github.com/google/timesketch/pull/1563
* Minor API client changes by kiddinn in https://github.com/google/timesketch/pull/1566
* First phase of new way of storing data in TS. by kiddinn in https://github.com/google/timesketch/pull/1565
* corrects README doc link to Sigma by ghchinoy in https://github.com/google/timesketch/pull/1571
* hyphen error in readme by neilgoyal in https://github.com/google/timesketch/pull/1572
* New storage - UI fix [phase one] by berggren in https://github.com/google/timesketch/pull/1573
* Adding datetime limits on the aggregation bucket. by kiddinn in https://github.com/google/timesketch/pull/1568
* Changing __timeline_id to __ts_timeline_id and fixing build_query by kiddinn in https://github.com/google/timesketch/pull/1574
* Adding the ability to check whether a given index has __timeline_id in it. by kiddinn in https://github.com/google/timesketch/pull/1569
* New build and DSL bugfix by berggren in https://github.com/google/timesketch/pull/1575
* New storage - UI fix for counting documents by berggren in https://github.com/google/timesketch/pull/1576
* UI: Dedicated analysis tab by berggren in https://github.com/google/timesketch/pull/1577
* Simplified regex for IPv4 features by itsmvd in https://github.com/google/timesketch/pull/1581
* Small bugfix in SSH features regex by itsmvd in https://github.com/google/timesketch/pull/1582
* UI: Timeline tab and removing ability to add old indices to sketches by berggren in https://github.com/google/timesketch/pull/1583
* UI: Move aggregations to its own tab by berggren in https://github.com/google/timesketch/pull/1584
* Bugfix: Wrong query count for new style timelines by berggren in https://github.com/google/timesketch/pull/1585
* Index Change: Changed plaso file ingestion, added query_dsl support and analyzer support by kiddinn in https://github.com/google/timesketch/pull/1578
* UI: Set status on timeline by berggren in https://github.com/google/timesketch/pull/1587
* UI: Add loading spinner while searching by berggren in https://github.com/google/timesketch/pull/1589
* Adding timeline supports into aggregations. by kiddinn in https://github.com/google/timesketch/pull/1588
* Updated e2e tests after plaso change and the run_plaso task to match and added timeline_id support to graphs by kiddinn in https://github.com/google/timesketch/pull/1590
* UI: Support index and time range filters in aggregations by berggren in https://github.com/google/timesketch/pull/1592
* Moved docker configs to the dev GIFT PPA by kiddinn in https://github.com/google/timesketch/pull/1595
* Deprecated the option to import timelines in tsctl. by kiddinn in https://github.com/google/timesketch/pull/1594
* Fixed a minor issue with Docker files by kiddinn in https://github.com/google/timesketch/pull/1599
* UI: Shifted filter buttons & added button titles by binglot in https://github.com/google/timesketch/pull/1597
* Fixed 1600 by adding mappings to deployment script. by kiddinn in https://github.com/google/timesketch/pull/1601
* Bump cryptography from 3.3.1 to 3.3.2 by dependabot in https://github.com/google/timesketch/pull/1604
* Extract IP address from RdpCoreTS event logs by itsmvd in https://github.com/google/timesketch/pull/1605
* Upgraded the importer version by kiddinn in https://github.com/google/timesketch/pull/1606
* Add .venv to .gitignore by jaegeral in https://github.com/google/timesketch/pull/1608
* Set correct timeline for analysis pipeline by berggren in https://github.com/google/timesketch/pull/1613
* UI: Fix missing timeline color by berggren in https://github.com/google/timesketch/pull/1612
* UI: Cleanup formatting by berggren in https://github.com/google/timesketch/pull/1614
* Fixed few issues: large text file imports, aggregations failing and upgrading PPA in docker files by kiddinn in https://github.com/google/timesketch/pull/1610
* Add ESLint GH action by berggren in https://github.com/google/timesketch/pull/1616
* Fixed issues with running analyzers in API client. by kiddinn in https://github.com/google/timesketch/pull/1623
* Minor bug fixes. by kiddinn in https://github.com/google/timesketch/pull/1625
* UI: Fix wrong timeline id in aggregations by berggren in https://github.com/google/timesketch/pull/1624
* Issue when removing timeline with a shared index by kiddinn in https://github.com/google/timesketch/pull/1626
* Added more error handling into the API, as well as retry to flushing events queue. by kiddinn in https://github.com/google/timesketch/pull/1627
* adding concepts and API dev guide by jaegeral in https://github.com/google/timesketch/pull/1618
* Increased timeout value for bulk inserts by default, also made it configurable. by kiddinn in https://github.com/google/timesketch/pull/1628
* Update docker-compose.yml by berggren in https://github.com/google/timesketch/pull/1631
* Update ES version for release docker by berggren in https://github.com/google/timesketch/pull/1632
* Update pylint by berggren in https://github.com/google/timesketch/pull/1635
* Pinned pylint version by kiddinn in https://github.com/google/timesketch/pull/1636
* Pinned astroid to version 2.4.0 in linter action by kiddinn in https://github.com/google/timesketch/pull/1637
* Spelling in some files comments by jaegeral in https://github.com/google/timesketch/pull/1634
* Release 20210224 by berggren in https://github.com/google/timesketch/pull/1638

New Contributors
* ghchinoy made their first contribution in https://github.com/google/timesketch/pull/1571
* neilgoyal made their first contribution in https://github.com/google/timesketch/pull/1572

**Full Changelog**: https://github.com/google/timesketch/compare/20201229...20210224

20201229
Release 20201229

What's Changed
* Minor change to fix error reporting in the API client. by kiddinn in https://github.com/google/timesketch/pull/1188
* Adding a config and a crypto module to the API client. by kiddinn in https://github.com/google/timesketch/pull/1189
* Adding a helper function into the config assistant to fill in missing details by kiddinn in https://github.com/google/timesketch/pull/1192
* Changed the `get_client` helper function inside the config library (API client) by kiddinn in https://github.com/google/timesketch/pull/1193
* Remove $ from the README.md by jaegeral in https://github.com/google/timesketch/pull/1196
* Splitting credentials out of crypto storage module in API client. by kiddinn in https://github.com/google/timesketch/pull/1194
* Refactor Docker for Development and e2e tests by berggren in https://github.com/google/timesketch/pull/1207
* add support for FireEye HX .mans files by garanews in https://github.com/google/timesketch/pull/1205
* Added missing tabulate dependency to dpkg files by joachimmetz in https://github.com/google/timesketch/pull/1212
* Updated installation instructions by joachimmetz in https://github.com/google/timesketch/pull/1209
* Adding HTML export to stories by kiddinn in https://github.com/google/timesketch/pull/1208
* Remove old UI code by berggren in https://github.com/google/timesketch/pull/1216
* Changed setup.py to not use pip internal-only API by joachimmetz in https://github.com/google/timesketch/pull/1224
* Additional changes to setup.py to support older versions of setuptools by joachimmetz in https://github.com/google/timesketch/pull/1225
* Added Ubuntu 20.04 Python 3.8 Travis CI tests by joachimmetz in https://github.com/google/timesketch/pull/1220
* Adding an analyzer result object to API client. by kiddinn in https://github.com/google/timesketch/pull/1215
* Updated dependencies and test scripts by joachimmetz in https://github.com/google/timesketch/pull/1222
* Deprecate old UI part 2 - cleanup views and templates by berggren in https://github.com/google/timesketch/pull/1230
* Disable mans import task by berggren in https://github.com/google/timesketch/pull/1227
* Update Docker-dev Readme by jaegeral in https://github.com/google/timesketch/pull/1228
* Added an import helper for reading configs. by kiddinn in https://github.com/google/timesketch/pull/1229
* Added CI test for building Dockerfile-prod by joachimmetz in https://github.com/google/timesketch/pull/1232
* Adding the ability to create a view through the API client. by kiddinn in https://github.com/google/timesketch/pull/1235
* Update docker dev README with right image by garanews in https://github.com/google/timesketch/pull/1236
* Added CI tests for Ubuntu 20.04 with GIFT PPA by joachimmetz in https://github.com/google/timesketch/pull/1237
* Minor bug fixes in the sketch API client library. by kiddinn in https://github.com/google/timesketch/pull/1240
* Updated Linux installation script by joachimmetz in https://github.com/google/timesketch/pull/1241
* Update Dockerfile-prod to install Timesketch from GIFT PPA by joachimmetz in https://github.com/google/timesketch/pull/1233
* Adding the ability to add tags to events. by kiddinn in https://github.com/google/timesketch/pull/1242
* Change the behavior of the Yeti analyzer by tomchop in https://github.com/google/timesketch/pull/1177
* Archive sketch functionality by kiddinn in https://github.com/google/timesketch/pull/1181
* Adding the ability to export sketches in the API client by kiddinn in https://github.com/google/timesketch/pull/1246
* Fix Docker Readme link (fixes 1247) by jaegeral in https://github.com/google/timesketch/pull/1249
* Refactor, adding version info and minor bug fixes by kiddinn in https://github.com/google/timesketch/pull/1248
* Splitting the Archive API calls to a separate file. by kiddinn in https://github.com/google/timesketch/pull/1250
* Hot patching the timesketch __init__ file until a new plaso release comes out by kiddinn in https://github.com/google/timesketch/pull/1255
* UI: Enable archive and export by berggren in https://github.com/google/timesketch/pull/1256
* Refactor archive API as well as expanding export support by kiddinn in https://github.com/google/timesketch/pull/1251
* Fixing an issue in the event tagging API call. by kiddinn in https://github.com/google/timesketch/pull/1257
* Refactor API by berggren in https://github.com/google/timesketch/pull/1264
* Improving error messages in the API client. by kiddinn in https://github.com/google/timesketch/pull/1261
* Pinned pylint to version 2.4.x and addressed linter issues by joachimmetz in https://github.com/google/timesketch/pull/1252
* Added pylint support to tox configuration by joachimmetz in https://github.com/google/timesketch/pull/1258
* Updated pytlint configuration file to version 2.4.x by joachimmetz in https://github.com/google/timesketch/pull/1253
* Adding more granular ACL granting. by kiddinn in https://github.com/google/timesketch/pull/1265
* Changing the behavior of the API calls for event tagging by kiddinn in https://github.com/google/timesketch/pull/1267
* Various changes to tsctl and the API by kiddinn in https://github.com/google/timesketch/pull/1272
* Fix method docstring (copy paste error) by jaegeral in https://github.com/google/timesketch/pull/1276
* Document location of frontend code on docker by jaegeral in https://github.com/google/timesketch/pull/1275
* Changed how manual events are added to a sketch. by kiddinn in https://github.com/google/timesketch/pull/1277
* Replace term whitelist with allowlist by jaegeral in https://github.com/google/timesketch/pull/1245
* Add support for Sigma rules by jaegeral in https://github.com/google/timesketch/pull/1231
* Bugfix: Set status on added timelines by berggren in https://github.com/google/timesketch/pull/1279
* Bugfix: Correct doc count for indices with >1 shard by berggren in https://github.com/google/timesketch/pull/1281
* Bugfix: Hide controls if permission is missing by berggren in https://github.com/google/timesketch/pull/1282
* Bugfix: Bug in auth for OIDC and new user allow list by berggren in https://github.com/google/timesketch/pull/1285
* Update screenshots by jaegeral in https://github.com/google/timesketch/pull/1284
* Safe Browsing API url analyzer by dov-csis in https://github.com/google/timesketch/pull/1171
* Importer: moving version information to a separate file, adding an init file to fix packaging. by kiddinn in https://github.com/google/timesketch/pull/1288
* Changed logger configuration by kiddinn in https://github.com/google/timesketch/pull/1290
* [Docker-doc] How to run tests by jaegeral in https://github.com/google/timesketch/pull/1289
* Tag GCS events in Cloud logs by Fryyyyy in https://github.com/google/timesketch/pull/1291
* Moved pylint CI checks to run in tox by joachimmetz in https://github.com/google/timesketch/pull/1266
* Added update release script and updated versions by joachimmetz in https://github.com/google/timesketch/pull/1293
* Changing the test_tool mocks to reflect recent changes in the analyzer interface by kiddinn in https://github.com/google/timesketch/pull/1296
* Update update_release.sh by berggren in https://github.com/google/timesketch/pull/1297
* Sigma cleanup by jaegeral in https://github.com/google/timesketch/pull/1286
* Update dependencies.ini by berggren in https://github.com/google/timesketch/pull/1301
* Updated dpkg files by joachimmetz in https://github.com/google/timesketch/pull/1302
* Minor changes to test tools by kiddinn in https://github.com/google/timesketch/pull/1304
* Fix an issue with unicode chars in sigma rules by jaegeral in https://github.com/google/timesketch/pull/1308
* Adding analyzer_run.py documentation by jaegeral in https://github.com/google/timesketch/pull/1306
* Added scrolling support into export API call by kiddinn in https://github.com/google/timesketch/pull/1316
* Sketch overview More Dialog Documentation by jaegeral in https://github.com/google/timesketch/pull/1315
* Mention 8 GB as recommended RAM by jaegeral in https://github.com/google/timesketch/pull/1325
* Initial stab at API client documentation by kiddinn in https://github.com/google/timesketch/pull/1318
* Adding the `admin` function to the User model by kiddinn in https://github.com/google/timesketch/pull/1298
* Added the ability to export events (not yet in the UI) by kiddinn in https://github.com/google/timesketch/pull/1317
* remove heatmap and manual events from userdoc by jaegeral in https://github.com/google/timesketch/pull/1329
* Fix a missing space by jaegeral in https://github.com/google/timesketch/pull/1333
* Added an EVTX Gap analyzer and fixed logging (filter out ES logs) by kiddinn in https://github.com/google/timesketch/pull/1321
* Add tabbed view of sketch list by berggren in https://github.com/google/timesketch/pull/1330
* Minor change to the EVTX Gap analyzer by kiddinn in https://github.com/google/timesketch/pull/1337
* UI: Display Data Sources per Timeline & Make them Clickable by binglot in https://github.com/google/timesketch/pull/1331
* Pagination bugfix by berggren in https://github.com/google/timesketch/pull/1340
* Changing exports to export all events and include all columns by kiddinn in https://github.com/google/timesketch/pull/1342
* UI: Add export button for search results by berggren in https://github.com/google/timesketch/pull/1343
* Fixing an issue with the export functionality. by kiddinn in https://github.com/google/timesketch/pull/1344
* Only aggregate stats if sketch have timelines by berggren in https://github.com/google/timesketch/pull/1345
* Refactor Documentation / Introduce admin guide by jaegeral in https://github.com/google/timesketch/pull/1336
* Display datetime based on timestamp by berggren in https://github.com/google/timesketch/pull/1347
* Optimize UI for quicker archive by berggren in https://github.com/google/timesketch/pull/1349
* Filter for events that have comments by berggren in https://github.com/google/timesketch/pull/1350
* Various Changes With Analyzers by kiddinn in https://github.com/google/timesketch/pull/1348
* Fix width on main screenshot by obsidianforensics in https://github.com/google/timesketch/pull/1356
* Small update to the 'Show data types' button by binglot in https://github.com/google/timesketch/pull/1357
* Minor changes to the way date is parsed when a custom event is added by kiddinn in https://github.com/google/timesketch/pull/1358
* Bump marked from 0.6.3 to 1.1.1 in /timesketch/frontend by dependabot in https://github.com/google/timesketch/pull/1360
* Adding `set_data_type` into the importer. by kiddinn in https://github.com/google/timesketch/pull/1361
* New end-to-end testing framework by berggren in https://github.com/google/timesketch/pull/1359
* Unarchive a sketch: User does not have sufficient access rights to delete a sketch. by jaegeral in https://github.com/google/timesketch/pull/1364
* Adding the ability to define return fields in the search_by_label function. by kiddinn in https://github.com/google/timesketch/pull/1363
* Several fixes: workflow changed, size in query_filter is honored in API client, special types are stripped in uploads and bulk insert errors are surfaced by kiddinn in https://github.com/google/timesketch/pull/1366
* Analyzer run description by jaegeral in https://github.com/google/timesketch/pull/1355
* UI build by berggren in https://github.com/google/timesketch/pull/1369
* Developer docs update by ash0x0 in https://github.com/google/timesketch/pull/1367
* Add button to remove story by Henkan in https://github.com/google/timesketch/pull/1372
* UI: Updating time filters by binglot in https://github.com/google/timesketch/pull/1365
* Dark Mode by berggren in https://github.com/google/timesketch/pull/1374
* Minor bug fixes by kiddinn in https://github.com/google/timesketch/pull/1375
* Update api doc by jaegeral in https://github.com/google/timesketch/pull/1378
* Adding the ability to add labels to sketches. by kiddinn in https://github.com/google/timesketch/pull/1381
* fix typo by garanews in https://github.com/google/timesketch/pull/1380
* Allow users to toggle time filters. by binglot in https://github.com/google/timesketch/pull/1384
* New Saved Search UI by berggren in https://github.com/google/timesketch/pull/1379
* new build by berggren in https://github.com/google/timesketch/pull/1385
* Handle missing chips in filter by berggren in https://github.com/google/timesketch/pull/1387
* Use supported opacity format by berggren in https://github.com/google/timesketch/pull/1388
* Adding the ability to check your own permission to a sketch. by kiddinn in https://github.com/google/timesketch/pull/1389
* Bugfix: Display chip as active by berggren in https://github.com/google/timesketch/pull/1390
* Bugfix: Set active chip by berggren in https://github.com/google/timesketch/pull/1391
* fixed URL for Google Python Style Guide by garanews in https://github.com/google/timesketch/pull/1394
* Adding in a manual vega spec aggregator by kiddinn in https://github.com/google/timesketch/pull/1396
* Update test for sketch model by berggren in https://github.com/google/timesketch/pull/1400
* Added support for optional keyword rdomain by itsmvd in https://github.com/google/timesketch/pull/1403
* Requirement.txt changed and added httmock==1.3.0 to test_requirements.txt by Surya6032 in https://github.com/google/timesketch/pull/1401
* Manually add/filter labels by berggren in https://github.com/google/timesketch/pull/1404
* Minor bug fixes here and there. by kiddinn in https://github.com/google/timesketch/pull/1405
* Bugfix for label aggregation by berggren in https://github.com/google/timesketch/pull/1407
* Add example to API client usage doc by jaegeral in https://github.com/google/timesketch/pull/1409
* API client: Adding a check for scroll ID in the explore function by kiddinn in https://github.com/google/timesketch/pull/1413
* Updating the colab notebook for the demo server. by kiddinn in https://github.com/google/timesketch/pull/1416
* Verify Sigma Rules test tool by jaegeral in https://github.com/google/timesketch/pull/1307
* Fixes to the API and API client by kiddinn in https://github.com/google/timesketch/pull/1426
* Added sketch attributes. by kiddinn in https://github.com/google/timesketch/pull/1429
* Adding the ability for analyzers to add sketch attributes by kiddinn in https://github.com/google/timesketch/pull/1430
* Fix a bug in the API client by kiddinn in https://github.com/google/timesketch/pull/1431
* Stripping pagination from saved views. by kiddinn in https://github.com/google/timesketch/pull/1433
* Fix api docstring typo by jaegeral in https://github.com/google/timesketch/pull/1437
* Adding notebooks for solving the case of the stolen Szechuan sauce by kiddinn in https://github.com/google/timesketch/pull/1425
* Improve error handling in the get_client function of the config API client module by kiddinn in https://github.com/google/timesketch/pull/1436
* Fixed notebook badges by kiddinn in https://github.com/google/timesketch/pull/1440
* Notebook update by jaegeral in https://github.com/google/timesketch/pull/1443
* APIClient doc link to Colab notebooks by jaegeral in https://github.com/google/timesketch/pull/1445
* Remove sudo from the docker dev guide by jaegeral in https://github.com/google/timesketch/pull/1446
* Single event notebook by jaegeral in https://github.com/google/timesketch/pull/1444
* Few updates to the MUS2019 CTF Colab notebook by kiddinn in https://github.com/google/timesketch/pull/1447
* Bump cryptography from 2.3 to 3.2 by dependabot in https://github.com/google/timesketch/pull/1432
* Updating the notebook for Szechuan sauce to use picatrix magics (and a minor bug fix in the API client) by kiddinn in https://github.com/google/timesketch/pull/1455
* Minor updates to the szechuan sauce analysis notebook by kiddinn in https://github.com/google/timesketch/pull/1457
* Docker refactor by berggren in https://github.com/google/timesketch/pull/1458
* Update issue templates by kiddinn in https://github.com/google/timesketch/pull/1459
* Update deploy_timesketch.sh by lxndrblz in https://github.com/google/timesketch/pull/1460
* Graph support v2 by berggren in https://github.com/google/timesketch/pull/1451
* Don't use scrolling for nested queries by berggren in https://github.com/google/timesketch/pull/1461
* Graph fixes by berggren in https://github.com/google/timesketch/pull/1462
* fix https://github.com/google/timesketch/issues/1450 by jaegeral in https://github.com/google/timesketch/pull/1464
* Analyzer feature extract by lprat in https://github.com/google/timesketch/pull/1452
* API client changes: click removed from cli_input and adding aggregation into stories fixed. by kiddinn in https://github.com/google/timesketch/pull/1463
* Providing a long description to the API client package. by kiddinn in https://github.com/google/timesketch/pull/1466
* Update docker images to use Ubuntu 20.04 by berggren in https://github.com/google/timesketch/pull/1467
* Fix a bug in the save function of the aggregation API object by kiddinn in https://github.com/google/timesketch/pull/1469
* Fix issue 1465 by removing hacky string replace .keyword by jaegeral in https://github.com/google/timesketch/pull/1468
* Save and cache graphs by berggren in https://github.com/google/timesketch/pull/1471
* Removed typing from story.py, which does not work on py3.6 by kiddinn in https://github.com/google/timesketch/pull/1474
* Bug fix for winservices graph plugin by berggren in https://github.com/google/timesketch/pull/1475
* Adding a GH workflow for unit tests by kiddinn in https://github.com/google/timesketch/pull/1476
* Remove Travis in favour of GH actions by berggren in https://github.com/google/timesketch/pull/1478
* Graph: Use ID from attributes by berggren in https://github.com/google/timesketch/pull/1480
* Improve the UX of Time Filters by binglot in https://github.com/google/timesketch/pull/1454
* Update GH actions by berggren in https://github.com/google/timesketch/pull/1483
* Cleanup old travis related files by berggren in https://github.com/google/timesketch/pull/1484
* New UI build by berggren in https://github.com/google/timesketch/pull/1485
* Updated dpkg configuration files by joachimmetz in https://github.com/google/timesketch/pull/1487
* Adding a linter GH workflow and adding a bit more resiliency into the error logging in the ES datastore by kiddinn in https://github.com/google/timesketch/pull/1488
* Fix saved views in stories by berggren in https://github.com/google/timesketch/pull/1493
* Pagination fixes by berggren in https://github.com/google/timesketch/pull/1492
* Graph: Choose layout type and edge style by berggren in https://github.com/google/timesketch/pull/1494
* Responsive graph and link support by berggren in https://github.com/google/timesketch/pull/1495
* Adding the ability to define multiple TS instances in the RC file. by kiddinn in https://github.com/google/timesketch/pull/1497
* Added API client search object by kiddinn in https://github.com/google/timesketch/pull/1490
* Minor changes to the search API object. by kiddinn in https://github.com/google/timesketch/pull/1498
* Sigma API / api_client by jaegeral in https://github.com/google/timesketch/pull/1456
* Making minor changes to the search API client. by kiddinn in https://github.com/google/timesketch/pull/1500
* Making changes to example notebooks after an API update by kiddinn in https://github.com/google/timesketch/pull/1501
* Modification to enable connection to production Elastic instance by joshfrogers in https://github.com/google/timesketch/pull/1503
* Sigma Rule maintain improvement by jaegeral in https://github.com/google/timesketch/pull/1502
* Adding picatrix docker container to the development docker config by kiddinn in https://github.com/google/timesketch/pull/1504
* Added support for config sections in importer and updated snippets in dev docker. by kiddinn in https://github.com/google/timesketch/pull/1505
* Added a new snippet to display a button and a form to create a search query for TS. by kiddinn in https://github.com/google/timesketch/pull/1506
* Use docker network for picatrix notebook by berggren in https://github.com/google/timesketch/pull/1507
* Small fix for a bug in the search API client by kiddinn in https://github.com/google/timesketch/pull/1510
* Added missing credentials to documentation by abitrolly in https://github.com/google/timesketch/pull/1508
* Moving the run_analyzer from the sketch API Client to the timeline object. by kiddinn in https://github.com/google/timesketch/pull/1513
* Tiny change to the API client by kiddinn in https://github.com/google/timesketch/pull/1516
* introcude troubleshooting guide by jaegeral in https://github.com/google/timesketch/pull/1499
* [docs] How to run a single test file by jaegeral in https://github.com/google/timesketch/pull/1517
* Customizing the notebook container by kiddinn in https://github.com/google/timesketch/pull/1519
* Home overview and graph fixes by berggren in https://github.com/google/timesketch/pull/1520
* Return full NX generated CY graph by berggren in https://github.com/google/timesketch/pull/1521
* Require view name by berggren in https://github.com/google/timesketch/pull/1523
* Format graph elements suitable for networkx python lib by berggren in https://github.com/google/timesketch/pull/1524
* Adding API client support for graphs. by kiddinn in https://github.com/google/timesketch/pull/1522
* [Sigma] improve evtx mapping by jaegeral in https://github.com/google/timesketch/pull/1529
* Update Developers-Guide.md by kiddinn in https://github.com/google/timesketch/pull/1528
* Sort dates correctly in the analyzer history view by rayanht in https://github.com/google/timesketch/pull/1525
* Sketch list pagination support for the API client by berggren in https://github.com/google/timesketch/pull/1531
* Bugfix: Set default per_page for pagination by berggren in https://github.com/google/timesketch/pull/1536
* Added last_activity of a sketch to the sketch meta section and into the API client by kiddinn in https://github.com/google/timesketch/pull/1538
* Bugfix: Dropdown hidden by berggren in https://github.com/google/timesketch/pull/1540
* Bugfix: Wrong count number in timeline list by berggren in https://github.com/google/timesketch/pull/1539
* Added details to the current_user call in the API client and improving e2e tests by kiddinn in https://github.com/google/timesketch/pull/1541
* Changes to dpkg configuration for Ubuntu 20.04 by joachimmetz in https://github.com/google/timesketch/pull/1545

New Contributors
* Fryyyyy made their first contribution in https://github.com/google/timesketch/pull/1291
* ash0x0 made their first contribution in https://github.com/google/timesketch/pull/1367
* Surya6032 made their first contribution in https://github.com/google/timesketch/pull/1401
* lxndrblz made their first contribution in https://github.com/google/timesketch/pull/1460
* joshfrogers made their first contribution in https://github.com/google/timesketch/pull/1503
* abitrolly made their first contribution in https://github.com/google/timesketch/pull/1508

**Full Changelog**: https://github.com/google/timesketch/compare/20200507...20201229

20201120
Release 20201120

What's Changed
* Minor change to fix error reporting in the API client. by kiddinn in https://github.com/google/timesketch/pull/1188
* Adding a config and a crypto module to the API client. by kiddinn in https://github.com/google/timesketch/pull/1189
* Adding a helper function into the config assistant to fill in missing details by kiddinn in https://github.com/google/timesketch/pull/1192
* Changed the `get_client` helper function inside the config library (API client) by kiddinn in https://github.com/google/timesketch/pull/1193
* Remove $ from the README.md by jaegeral in https://github.com/google/timesketch/pull/1196
* Splitting credentials out of crypto storage module in API client. by kiddinn in https://github.com/google/timesketch/pull/1194
* Refactor Docker for Development and e2e tests by berggren in https://github.com/google/timesketch/pull/1207
* add support for FireEye HX .mans files by garanews in https://github.com/google/timesketch/pull/1205
* Added missing tabulate dependency to dpkg files by joachimmetz in https://github.com/google/timesketch/pull/1212
* Updated installation instructions by joachimmetz in https://github.com/google/timesketch/pull/1209
* Adding HTML export to stories by kiddinn in https://github.com/google/timesketch/pull/1208
* Remove old UI code by berggren in https://github.com/google/timesketch/pull/1216
* Changed setup.py to not use pip internal-only API by joachimmetz in https://github.com/google/timesketch/pull/1224
* Additional changes to setup.py to support older versions of setuptools by joachimmetz in https://github.com/google/timesketch/pull/1225
* Added Ubuntu 20.04 Python 3.8 Travis CI tests by joachimmetz in https://github.com/google/timesketch/pull/1220
* Adding an analyzer result object to API client. by kiddinn in https://github.com/google/timesketch/pull/1215
* Updated dependencies and test scripts by joachimmetz in https://github.com/google/timesketch/pull/1222
* Deprecate old UI part 2 - cleanup views and templates by berggren in https://github.com/google/timesketch/pull/1230
* Disable mans import task by berggren in https://github.com/google/timesketch/pull/1227
* Update Docker-dev Readme by jaegeral in https://github.com/google/timesketch/pull/1228
* Added an import helper for reading configs. by kiddinn in https://github.com/google/timesketch/pull/1229
* Added CI test for building Dockerfile-prod by joachimmetz in https://github.com/google/timesketch/pull/1232
* Adding the ability to create a view through the API client. by kiddinn in https://github.com/google/timesketch/pull/1235
* Update docker dev README with right image by garanews in https://github.com/google/timesketch/pull/1236
* Added CI tests for Ubuntu 20.04 with GIFT PPA by joachimmetz in https://github.com/google/timesketch/pull/1237
* Minor bug fixes in the sketch API client library. by kiddinn in https://github.com/google/timesketch/pull/1240
* Updated Linux installation script by joachimmetz in https://github.com/google/timesketch/pull/1241
* Update Dockerfile-prod to install Timesketch from GIFT PPA by joachimmetz in https://github.com/google/timesketch/pull/1233
* Adding the ability to add tags to events. by kiddinn in https://github.com/google/timesketch/pull/1242
* Change the behavior of the Yeti analyzer by tomchop in https://github.com/google/timesketch/pull/1177
* Archive sketch functionality by kiddinn in https://github.com/google/timesketch/pull/1181
* Adding the ability to export sketches in the API client by kiddinn in https://github.com/google/timesketch/pull/1246
* Fix Docker Readme link (fixes 1247) by jaegeral in https://github.com/google/timesketch/pull/1249
* Refactor, adding version info and minor bug fixes by kiddinn in https://github.com/google/timesketch/pull/1248
* Splitting the Archive API calls to a separate file. by kiddinn in https://github.com/google/timesketch/pull/1250
* Hot patching the timesketch __init__ file until a new plaso release comes out by kiddinn in https://github.com/google/timesketch/pull/1255
* UI: Enable archive and export by berggren in https://github.com/google/timesketch/pull/1256
* Refactor archive API as well as expanding export support by kiddinn in https://github.com/google/timesketch/pull/1251
* Fixing an issue in the event tagging API call. by kiddinn in https://github.com/google/timesketch/pull/1257
* Refactor API by berggren in https://github.com/google/timesketch/pull/1264
* Improving error messages in the API client. by kiddinn in https://github.com/google/timesketch/pull/1261
* Pinned pylint to version 2.4.x and addressed linter issues by joachimmetz in https://github.com/google/timesketch/pull/1252
* Added pylint support to tox configuration by joachimmetz in https://github.com/google/timesketch/pull/1258
* Updated pytlint configuration file to version 2.4.x by joachimmetz in https://github.com/google/timesketch/pull/1253
* Adding more granular ACL granting. by kiddinn in https://github.com/google/timesketch/pull/1265
* Changing the behavior of the API calls for event tagging by kiddinn in https://github.com/google/timesketch/pull/1267
* Various changes to tsctl and the API by kiddinn in https://github.com/google/timesketch/pull/1272
* Fix method docstring (copy paste error) by jaegeral in https://github.com/google/timesketch/pull/1276
* Document location of frontend code on docker by jaegeral in https://github.com/google/timesketch/pull/1275
* Changed how manual events are added to a sketch. by kiddinn in https://github.com/google/timesketch/pull/1277
* Replace term whitelist with allowlist by jaegeral in https://github.com/google/timesketch/pull/1245
* Add support for Sigma rules by jaegeral in https://github.com/google/timesketch/pull/1231
* Bugfix: Set status on added timelines by berggren in https://github.com/google/timesketch/pull/1279
* Bugfix: Correct doc count for indices with >1 shard by berggren in https://github.com/google/timesketch/pull/1281
* Bugfix: Hide controls if permission is missing by berggren in https://github.com/google/timesketch/pull/1282
* Bugfix: Bug in auth for OIDC and new user allow list by berggren in https://github.com/google/timesketch/pull/1285
* Update screenshots by jaegeral in https://github.com/google/timesketch/pull/1284
* Safe Browsing API url analyzer by dov-csis in https://github.com/google/timesketch/pull/1171
* Importer: moving version information to a separate file, adding an init file to fix packaging. by kiddinn in https://github.com/google/timesketch/pull/1288
* Changed logger configuration by kiddinn in https://github.com/google/timesketch/pull/1290
* [Docker-doc] How to run tests by jaegeral in https://github.com/google/timesketch/pull/1289
* Tag GCS events in Cloud logs by Fryyyyy in https://github.com/google/timesketch/pull/1291
* Moved pylint CI checks to run in tox by joachimmetz in https://github.com/google/timesketch/pull/1266
* Added update release script and updated versions by joachimmetz in https://github.com/google/timesketch/pull/1293
* Changing the test_tool mocks to reflect recent changes in the analyzer interface by kiddinn in https://github.com/google/timesketch/pull/1296
* Update update_release.sh by berggren in https://github.com/google/timesketch/pull/1297
* Sigma cleanup by jaegeral in https://github.com/google/timesketch/pull/1286
* Update dependencies.ini by berggren in https://github.com/google/timesketch/pull/1301
* Updated dpkg files by joachimmetz in https://github.com/google/timesketch/pull/1302
* Minor changes to test tools by kiddinn in https://github.com/google/timesketch/pull/1304
* Fix an issue with unicode chars in sigma rules by jaegeral in https://github.com/google/timesketch/pull/1308
* Adding analyzer_run.py documentation by jaegeral in https://github.com/google/timesketch/pull/1306
* Added scrolling support into export API call by kiddinn in https://github.com/google/timesketch/pull/1316
* Sketch overview More Dialog Documentation by jaegeral in https://github.com/google/timesketch/pull/1315
* Mention 8 GB as recommended RAM by jaegeral in https://github.com/google/timesketch/pull/1325
* Initial stab at API client documentation by kiddinn in https://github.com/google/timesketch/pull/1318
* Adding the `admin` function to the User model by kiddinn in https://github.com/google/timesketch/pull/1298
* Added the ability to export events (not yet in the UI) by kiddinn in https://github.com/google/timesketch/pull/1317
* remove heatmap and manual events from userdoc by jaegeral in https://github.com/google/timesketch/pull/1329
* Fix a missing space by jaegeral in https://github.com/google/timesketch/pull/1333
* Added an EVTX Gap analyzer and fixed logging (filter out ES logs) by kiddinn in https://github.com/google/timesketch/pull/1321
* Add tabbed view of sketch list by berggren in https://github.com/google/timesketch/pull/1330
* Minor change to the EVTX Gap analyzer by kiddinn in https://github.com/google/timesketch/pull/1337
* UI: Display Data Sources per Timeline & Make them Clickable by binglot in https://github.com/google/timesketch/pull/1331
* Pagination bugfix by berggren in https://github.com/google/timesketch/pull/1340
* Changing exports to export all events and include all columns by kiddinn in https://github.com/google/timesketch/pull/1342
* UI: Add export button for search results by berggren in https://github.com/google/timesketch/pull/1343
* Fixing an issue with the export functionality. by kiddinn in https://github.com/google/timesketch/pull/1344
* Only aggregate stats if sketch have timelines by berggren in https://github.com/google/timesketch/pull/1345
* Refactor Documentation / Introduce admin guide by jaegeral in https://github.com/google/timesketch/pull/1336
* Display datetime based on timestamp by berggren in https://github.com/google/timesketch/pull/1347
* Optimize UI for quicker archive by berggren in https://github.com/google/timesketch/pull/1349
* Filter for events that have comments by berggren in https://github.com/google/timesketch/pull/1350
* Various Changes With Analyzers by kiddinn in https://github.com/google/timesketch/pull/1348
* Fix width on main screenshot by obsidianforensics in https://github.com/google/timesketch/pull/1356
* Small update to the 'Show data types' button by binglot in https://github.com/google/timesketch/pull/1357
* Minor changes to the way date is parsed when a custom event is added by kiddinn in https://github.com/google/timesketch/pull/1358
* Bump marked from 0.6.3 to 1.1.1 in /timesketch/frontend by dependabot in https://github.com/google/timesketch/pull/1360
* Adding `set_data_type` into the importer. by kiddinn in https://github.com/google/timesketch/pull/1361
* New end-to-end testing framework by berggren in https://github.com/google/timesketch/pull/1359
* Unarchive a sketch: User does not have sufficient access rights to delete a sketch. by jaegeral in https://github.com/google/timesketch/pull/1364
* Adding the ability to define return fields in the search_by_label function. by kiddinn in https://github.com/google/timesketch/pull/1363
* Several fixes: workflow changed, size in query_filter is honored in API client, special types are stripped in uploads and bulk insert errors are surfaced by kiddinn in https://github.com/google/timesketch/pull/1366
* Analyzer run description by jaegeral in https://github.com/google/timesketch/pull/1355
* UI build by berggren in https://github.com/google/timesketch/pull/1369
* Developer docs update by ash0x0 in https://github.com/google/timesketch/pull/1367
* Add button to remove story by Henkan in https://github.com/google/timesketch/pull/1372
* UI: Updating time filters by binglot in https://github.com/google/timesketch/pull/1365
* Dark Mode by berggren in https://github.com/google/timesketch/pull/1374
* Minor bug fixes by kiddinn in https://github.com/google/timesketch/pull/1375
* Update api doc by jaegeral in https://github.com/google/timesketch/pull/1378
* Adding the ability to add labels to sketches. by kiddinn in https://github.com/google/timesketch/pull/1381
* fix typo by garanews in https://github.com/google/timesketch/pull/1380
* Allow users to toggle time filters. by binglot in https://github.com/google/timesketch/pull/1384
* New Saved Search UI by berggren in https://github.com/google/timesketch/pull/1379
* new build by berggren in https://github.com/google/timesketch/pull/1385
* Handle missing chips in filter by berggren in https://github.com/google/timesketch/pull/1387
* Use supported opacity format by berggren in https://github.com/google/timesketch/pull/1388
* Adding the ability to check your own permission to a sketch. by kiddinn in https://github.com/google/timesketch/pull/1389
* Bugfix: Display chip as active by berggren in https://github.com/google/timesketch/pull/1390
* Bugfix: Set active chip by berggren in https://github.com/google/timesketch/pull/1391
* fixed URL for Google Python Style Guide by garanews in https://github.com/google/timesketch/pull/1394
* Adding in a manual vega spec aggregator by kiddinn in https://github.com/google/timesketch/pull/1396
* Update test for sketch model by berggren in https://github.com/google/timesketch/pull/1400
* Added support for optional keyword rdomain by itsmvd in https://github.com/google/timesketch/pull/1403
* Requirement.txt changed and added httmock==1.3.0 to test_requirements.txt by Surya6032 in https://github.com/google/timesketch/pull/1401
* Manually add/filter labels by berggren in https://github.com/google/timesketch/pull/1404
* Minor bug fixes here and there. by kiddinn in https://github.com/google/timesketch/pull/1405
* Bugfix for label aggregation by berggren in https://github.com/google/timesketch/pull/1407
* Add example to API client usage doc by jaegeral in https://github.com/google/timesketch/pull/1409
* API client: Adding a check for scroll ID in the explore function by kiddinn in https://github.com/google/timesketch/pull/1413
* Updating the colab notebook for the demo server. by kiddinn in https://github.com/google/timesketch/pull/1416
* Verify Sigma Rules test tool by jaegeral in https://github.com/google/timesketch/pull/1307
* Fixes to the API and API client by kiddinn in https://github.com/google/timesketch/pull/1426
* Added sketch attributes. by kiddinn in https://github.com/google/timesketch/pull/1429
* Adding the ability for analyzers to add sketch attributes by kiddinn in https://github.com/google/timesketch/pull/1430
* Fix a bug in the API client by kiddinn in https://github.com/google/timesketch/pull/1431
* Stripping pagination from saved views. by kiddinn in https://github.com/google/timesketch/pull/1433
* Fix api docstring typo by jaegeral in https://github.com/google/timesketch/pull/1437
* Adding notebooks for solving the case of the stolen Szechuan sauce by kiddinn in https://github.com/google/timesketch/pull/1425
* Improve error handling in the get_client function of the config API client module by kiddinn in https://github.com/google/timesketch/pull/1436
* Fixed notebook badges by kiddinn in https://github.com/google/timesketch/pull/1440
* Notebook update by jaegeral in https://github.com/google/timesketch/pull/1443
* APIClient doc link to Colab notebooks by jaegeral in https://github.com/google/timesketch/pull/1445
* Remove sudo from the docker dev guide by jaegeral in https://github.com/google/timesketch/pull/1446
* Single event notebook by jaegeral in https://github.com/google/timesketch/pull/1444
* Few updates to the MUS2019 CTF Colab notebook by kiddinn in https://github.com/google/timesketch/pull/1447
* Bump cryptography from 2.3 to 3.2 by dependabot in https://github.com/google/timesketch/pull/1432
* Updating the notebook for Szechuan sauce to use picatrix magics (and a minor bug fix in the API client) by kiddinn in https://github.com/google/timesketch/pull/1455
* Minor updates to the szechuan sauce analysis notebook by kiddinn in https://github.com/google/timesketch/pull/1457
* Docker refactor by berggren in https://github.com/google/timesketch/pull/1458
* Update issue templates by kiddinn in https://github.com/google/timesketch/pull/1459
* Update deploy_timesketch.sh by lxndrblz in https://github.com/google/timesketch/pull/1460
* Graph support v2 by berggren in https://github.com/google/timesketch/pull/1451
* Don't use scrolling for nested queries by berggren in https://github.com/google/timesketch/pull/1461
* Graph fixes by berggren in https://github.com/google/timesketch/pull/1462
* fix https://github.com/google/timesketch/issues/1450 by jaegeral in https://github.com/google/timesketch/pull/1464
* Analyzer feature extract by lprat in https://github.com/google/timesketch/pull/1452
* API client changes: click removed from cli_input and adding aggregation into stories fixed. by kiddinn in https://github.com/google/timesketch/pull/1463
* Providing a long description to the API client package. by kiddinn in https://github.com/google/timesketch/pull/1466
* Update docker images to use Ubuntu 20.04 by berggren in https://github.com/google/timesketch/pull/1467
* Fix a bug in the save function of the aggregation API object by kiddinn in https://github.com/google/timesketch/pull/1469
* Fix issue 1465 by removing hacky string replace .keyword by jaegeral in https://github.com/google/timesketch/pull/1468
* Save and cache graphs by berggren in https://github.com/google/timesketch/pull/1471
* Removed typing from story.py, which does not work on py3.6 by kiddinn in https://github.com/google/timesketch/pull/1474
* Bug fix for winservices graph plugin by berggren in https://github.com/google/timesketch/pull/1475
* Adding a GH workflow for unit tests by kiddinn in https://github.com/google/timesketch/pull/1476
* Remove Travis in favour of GH actions by berggren in https://github.com/google/timesketch/pull/1478
* Graph: Use ID from attributes by berggren in https://github.com/google/timesketch/pull/1480
* Improve the UX of Time Filters by binglot in https://github.com/google/timesketch/pull/1454
* Update GH actions by berggren in https://github.com/google/timesketch/pull/1483
* Cleanup old travis related files by berggren in https://github.com/google/timesketch/pull/1484
* New UI build by berggren in https://github.com/google/timesketch/pull/1485
* Updated dpkg configuration files by joachimmetz in https://github.com/google/timesketch/pull/1487

New Contributors
* Fryyyyy made their first contribution in https://github.com/google/timesketch/pull/1291
* ash0x0 made their first contribution in https://github.com/google/timesketch/pull/1367
* Surya6032 made their first contribution in https://github.com/google/timesketch/pull/1401
* lxndrblz made their first contribution in https://github.com/google/timesketch/pull/1460

**Full Changelog**: https://github.com/google/timesketch/compare/20200507...20201120

20200507
Release 20200507

What's Changed
* Adding labels to aggregations, adding ability to filter based on labels. by kiddinn in https://github.com/google/timesketch/pull/1176
* Bugfix: Collaborator list and failed timelines by berggren in https://github.com/google/timesketch/pull/1178
* Moving the importer into a separate directory and a library. by kiddinn in https://github.com/google/timesketch/pull/1182
* Bugfix: Reset on new search when pagination by berggren in https://github.com/google/timesketch/pull/1187
* Changed the importer, adding support for config files, etc by kiddinn in https://github.com/google/timesketch/pull/1183


**Full Changelog**: https://github.com/google/timesketch/compare/20200422...20200507

20200422
Release 20200422

What's Changed
* Fix a bug if there are no stories in a sketch and add properties to View by kiddinn in https://github.com/google/timesketch/pull/1144
* Save aggregations and add to Stories by berggren in https://github.com/google/timesketch/pull/1145
* Support non-text fields in aggregations by berggren in https://github.com/google/timesketch/pull/1147
* Add ability to render table from an aggregation by berggren in https://github.com/google/timesketch/pull/1148
* Sort analyzer list and add button to overview page by berggren in https://github.com/google/timesketch/pull/1149
* Fix docker installation documentation link. by hacktobeer in https://github.com/google/timesketch/pull/1158
* Several changes in the API, API client and analyzer for further story support by kiddinn in https://github.com/google/timesketch/pull/1146
* More Chart support - added linechart and href by kiddinn in https://github.com/google/timesketch/pull/1160
* Add listing of groups and users by berggren in https://github.com/google/timesketch/pull/1167
* Update installation and plaso documentation by Henkan in https://github.com/google/timesketch/pull/1169
* Fixing typo Installation re. libffi by dov-csis in https://github.com/google/timesketch/pull/1168
* debian package manager tweaks by Rajpratik71 in https://github.com/google/timesketch/pull/1122
* UI: New sketch list by berggren in https://github.com/google/timesketch/pull/1170
* Adding aggregation groups by kiddinn in https://github.com/google/timesketch/pull/1166
* UI: Support group aggregations in stories by berggren in https://github.com/google/timesketch/pull/1173
* Added ability to modify aggregations and aggregation groups by kiddinn in https://github.com/google/timesketch/pull/1172

New Contributors
* hacktobeer made their first contribution in https://github.com/google/timesketch/pull/1158
* Rajpratik71 made their first contribution in https://github.com/google/timesketch/pull/1122

**Full Changelog**: https://github.com/google/timesketch/compare/20200319...20200422

20200319
Release 20200319

What's Changed
* Adding a check to see whether index has completed before running an analyzer by kiddinn in https://github.com/google/timesketch/pull/1130
* Minor change to cache, caching client by kiddinn in https://github.com/google/timesketch/pull/1131
* Create stories from analyzers by berggren in https://github.com/google/timesketch/pull/1132
* Opening test files with codecs instead of default open. by kiddinn in https://github.com/google/timesketch/pull/1133
* Sketch Analyzer for Windows artefacts of application crashes by binglot in https://github.com/google/timesketch/pull/1111
* Fix for a flaky test with the win crash analyzer. by kiddinn in https://github.com/google/timesketch/pull/1135
* Adding support for working with stories from the API client, as well as adding aggregation support in the backend by kiddinn in https://github.com/google/timesketch/pull/1134
* Upgrading the fake analyzer interface with latest interface changes. by kiddinn in https://github.com/google/timesketch/pull/1136
* bump requests version to 2.22.0 by jaegeral in https://github.com/google/timesketch/pull/1137
* Adding the ability to add users or groups to the sketch ACL. by kiddinn in https://github.com/google/timesketch/pull/1138
* Always show share button and collaborator list by berggren in https://github.com/google/timesketch/pull/1140
* New analyzer that adds tag/emojis to events based on config. by berggren in https://github.com/google/timesketch/pull/1141
* Adding the ability to export stories. by kiddinn in https://github.com/google/timesketch/pull/1142
* Add an analyzer status check into the sketch API client. by kiddinn in https://github.com/google/timesketch/pull/1143


**Full Changelog**: https://github.com/google/timesketch/compare/20200310...20200319

20200310
Release 20200310

What's Changed
* Fix start of Elasticsearch by wincentbalin in https://github.com/google/timesketch/pull/1118
* Group share UI and spacing in timeline picker by berggren in https://github.com/google/timesketch/pull/1120
* Minor bug fix in the importer code and a change in the way return fields are handled in the API by kiddinn in https://github.com/google/timesketch/pull/1121
* Adding a logger to sketch.explore as well as a cleanup of "filter" in sketch API by kiddinn in https://github.com/google/timesketch/pull/1123
* Changed how message string is constructed by kiddinn in https://github.com/google/timesketch/pull/1124
* Replaces PASSWORD with PASSWORD_FILE (fixes 1126) by einfallstoll in https://github.com/google/timesketch/pull/1127
* Stats on indices by berggren in https://github.com/google/timesketch/pull/1129

New Contributors
* wincentbalin made their first contribution in https://github.com/google/timesketch/pull/1118
* einfallstoll made their first contribution in https://github.com/google/timesketch/pull/1127

**Full Changelog**: https://github.com/google/timesketch/compare/20200227...20200310

20200227
Release 20200227

What's Changed
* Autocomplete filter array by berggren in https://github.com/google/timesketch/pull/1116
* Minor changes to importer and api by kiddinn in https://github.com/google/timesketch/pull/1117


**Full Changelog**: https://github.com/google/timesketch/compare/20200226...20200227

20200226
Release 20200226

What's Changed
* Psexec sessionizer by nnyx7 in https://github.com/google/timesketch/pull/981
* Replace get event in tests by nnyx7 in https://github.com/google/timesketch/pull/980
* Fixing a minor issue if context is empty and some linter fixes by kiddinn in https://github.com/google/timesketch/pull/1096
* Evtx sessionizer by katemacleod in https://github.com/google/timesketch/pull/976
* SSH bruteforce session analyzer by katemacleod in https://github.com/google/timesketch/pull/972
* Bug fixes for tsctl by kiddinn in https://github.com/google/timesketch/pull/1097
* Google Cloud Storage importer by berggren in https://github.com/google/timesketch/pull/1098
* Possibility to specify index when uploading data for the timesketch_api_client by benua74 in https://github.com/google/timesketch/pull/1095
* Changes to use pybuild debhelper by joachimmetz in https://github.com/google/timesketch/pull/1101
* Changed setup.py to support bdist by joachimmetz in https://github.com/google/timesketch/pull/1103
* Updated l2tdevtools configuration and dpkg files by joachimmetz in https://github.com/google/timesketch/pull/1104
* Provide example commands docker mac shares by jaegeral in https://github.com/google/timesketch/pull/1068
* Elasticsearch 7.x support by berggren in https://github.com/google/timesketch/pull/1108
* Changed the upload API to support chunks and direct entries, added functionality into the importer by kiddinn in https://github.com/google/timesketch/pull/1099
* Added an importer tool as well as changing how jsonl files are imported using the importer by kiddinn in https://github.com/google/timesketch/pull/1105
* Bugfix: Pagination and event count by berggren in https://github.com/google/timesketch/pull/1114
* Fix an issue with the importer by kiddinn in https://github.com/google/timesketch/pull/1113
* Better error UI by berggren in https://github.com/google/timesketch/pull/1115

New Contributors
* benua74 made their first contribution in https://github.com/google/timesketch/pull/1095

**Full Changelog**: https://github.com/google/timesketch/compare/20200131...20200226

20200131
Release 20200131

What's Changed
* Bug fix: Trailing slash in API urls by berggren in https://github.com/google/timesketch/pull/1064
* New build for release 201912120-2 by berggren in https://github.com/google/timesketch/pull/1065
* New favicon by berggren in https://github.com/google/timesketch/pull/1066
* Docker install: run from /tmp directory by gaelmuller in https://github.com/google/timesketch/pull/1067
* Mention the correct slack channel by jaegeral in https://github.com/google/timesketch/pull/1069
* Small update to dev docker readme by jaegeral in https://github.com/google/timesketch/pull/1070
* Round favicon by berggren in https://github.com/google/timesketch/pull/1073
* Fix context query bug by berggren in https://github.com/google/timesketch/pull/1074
* Cleanup dependencies and tests by berggren in https://github.com/google/timesketch/pull/1075
* Remove Python2 support by berggren in https://github.com/google/timesketch/pull/1080
* Initial Sigma support by Onager in https://github.com/google/timesketch/pull/1028
* Bump cryptography from 2.1.4 to 2.3 by dependabot in https://github.com/google/timesketch/pull/1078
* Adding a tool to run analyzers without requiring TS to be installed (for dev/testing purposes) by kiddinn in https://github.com/google/timesketch/pull/1085
* Use new frontend and remove Neo4j by berggren in https://github.com/google/timesketch/pull/1090
* Add pagination controls at the end of the page by berggren in https://github.com/google/timesketch/pull/1091
* Upload and Analyzer UI fixes by berggren in https://github.com/google/timesketch/pull/1092


**Full Changelog**: https://github.com/google/timesketch/compare/20191220...20200131

20191220
New UI, more analyzers and an updated API client

What's Changed
* Analyzer update by kiddinn in https://github.com/google/timesketch/pull/828
* Multiple changes for code flagged by pylint 2.1.1 by joachimmetz in https://github.com/google/timesketch/pull/833
* Remove u' from docker scripts by berggren in https://github.com/google/timesketch/pull/835
* Fixes for python3 compatibility by kiddinn in https://github.com/google/timesketch/pull/829
* Support RE flags by berggren in https://github.com/google/timesketch/pull/837
* Check if user exist by berggren in https://github.com/google/timesketch/pull/838
* New aggregation framework by berggren in https://github.com/google/timesketch/pull/842
* Allow comma separated list of usernames to share to by berggren in https://github.com/google/timesketch/pull/844
* Linkedin account extraction by kovakina in https://github.com/google/timesketch/pull/839
* New frontend by berggren in https://github.com/google/timesketch/pull/848
* Update Installation.md by joachimmetz in https://github.com/google/timesketch/pull/853
* Moved pylint to stand-alone CI test target by joachimmetz in https://github.com/google/timesketch/pull/831
* Updated CI test to use pylint 2.2.2 by joachimmetz in https://github.com/google/timesketch/pull/852
* Added Bionic Docker-based tests that use dependencies from GIFT PPA by joachimmetz in https://github.com/google/timesketch/pull/832
* Changed domain analyzer, removing human readable manipulation, issue 847 by kiddinn in https://github.com/google/timesketch/pull/858
* Update dockerfile to copy config recursively by Onager in https://github.com/google/timesketch/pull/859
* Updated .pylintrc and changes for linter 855 by joachimmetz in https://github.com/google/timesketch/pull/856
* Added l2tdevtools configuration files and generated dependency files by joachimmetz in https://github.com/google/timesketch/pull/790
* Adding a term aggregator. by kiddinn in https://github.com/google/timesketch/pull/857
* Added API calls for aggregations as well as enabling client access to aggregations (step 1) by kiddinn in https://github.com/google/timesketch/pull/860
* Markdown stories by berggren in https://github.com/google/timesketch/pull/866
* Delete sketch functionality by berggren in https://github.com/google/timesketch/pull/868
* MUS2019-CTF Colab by obsidianforensics in https://github.com/google/timesketch/pull/872
* Update CreateTimelineFromJSONorCSV.md by obsidianforensics in https://github.com/google/timesketch/pull/877
* Timeline management by berggren in https://github.com/google/timesketch/pull/875
* Aggregation SQL model by berggren in https://github.com/google/timesketch/pull/876
* Removed elasticsearch5-py as a dependency by joachimmetz in https://github.com/google/timesketch/pull/879
* Update dependencies by berggren in https://github.com/google/timesketch/pull/878
* Update dependencies by joachimmetz in https://github.com/google/timesketch/pull/881
* Fixed problem that the celery does not start automatically. by piwikjapan in https://github.com/google/timesketch/pull/807
* Changed phishy domain analyzer to return early if no results. by kiddinn in https://github.com/google/timesketch/pull/893
* Minor bug fixes in CSV file import for python3 compatability by kiddinn in https://github.com/google/timesketch/pull/894
* Updated Dockerfile to use Python 3 timesketch by joachimmetz in https://github.com/google/timesketch/pull/887
* Add example nginx and systemd config files by berggren in https://github.com/google/timesketch/pull/895
* Commit Sketch object to DB before setting ACL by berggren in https://github.com/google/timesketch/pull/897
* Exit early if there are no domains to analyze by berggren in https://github.com/google/timesketch/pull/898
* Use legacy aggregators in old UI by berggren in https://github.com/google/timesketch/pull/899
* Adding more aggregation APIs and upgrading API client to make use of them. by kiddinn in https://github.com/google/timesketch/pull/889
* Docker refactor by berggren in https://github.com/google/timesketch/pull/903
* Adding starred event lookups to colab example by kiddinn in https://github.com/google/timesketch/pull/907
* Added Debian packaging files by joachimmetz in https://github.com/google/timesketch/pull/882
* New timeline picker component by berggren in https://github.com/google/timesketch/pull/911
* Fixing wrong file locations in docker configs by kiddinn in https://github.com/google/timesketch/pull/915
* Logo Files by althealabre in https://github.com/google/timesketch/pull/917
* Fix a Python3 error by encoding before hashing by taishi8117 in https://github.com/google/timesketch/pull/914
* Yeti indicator analyzer by tomchop in https://github.com/google/timesketch/pull/900
* Editable sketch summary by berggren in https://github.com/google/timesketch/pull/910
* Dynamic analyzers by berggren in https://github.com/google/timesketch/pull/909
* Time bubbles by berggren in https://github.com/google/timesketch/pull/919
* GCP servicekey analyzer for stackdriver logs by pstirparo in https://github.com/google/timesketch/pull/918
* Fix for issue 927 by jadams in https://github.com/google/timesketch/pull/928
* Fixed typo in Users-guide.md. by katemacleod in https://github.com/google/timesketch/pull/929
* Remove file no longer used by nnyx7 in https://github.com/google/timesketch/pull/931
* Added tsctl import command to Users-Guide.md by katemacleod in https://github.com/google/timesketch/pull/932
* Add missing line in the docker-compose files by nnyx7 in https://github.com/google/timesketch/pull/936
* Add missing code quotes by Liamdoult in https://github.com/google/timesketch/pull/940
* Added basic sessionizer plugin. by nnyx7 in https://github.com/google/timesketch/pull/939
* Format error as string by tomchop in https://github.com/google/timesketch/pull/944
* Fix 934 by tomchop in https://github.com/google/timesketch/pull/949
* Move dependency install to Dockerfile by berggren in https://github.com/google/timesketch/pull/958
* Better explanation of the purge command by jaegeral in https://github.com/google/timesketch/pull/959
* Mention SearchQueryGuide and SketchOverview in the userguide by jaegeral in https://github.com/google/timesketch/pull/947
* Fix for error when adding a view with query_dsl by katemacleod in https://github.com/google/timesketch/pull/948
* Fixing an issue with domain analyzer. by kiddinn in https://github.com/google/timesketch/pull/961
* New UI: Time filters by berggren in https://github.com/google/timesketch/pull/925
* Remove Xenial from Travis tests by berggren in https://github.com/google/timesketch/pull/963
* Dynamic aggregators by berggren in https://github.com/google/timesketch/pull/920
* Delete view by berggren in https://github.com/google/timesketch/pull/962
* New login page by berggren in https://github.com/google/timesketch/pull/966
* New logo header by berggren in https://github.com/google/timesketch/pull/968
* Expert sessionizer by katemacleod in https://github.com/google/timesketch/pull/941
* Fix MockDataStore storing events by nnyx7 in https://github.com/google/timesketch/pull/970
* Add sequence sessionizer. by nnyx7 in https://github.com/google/timesketch/pull/960
* SSH sessionizing sketch analyser by nnyx7 in https://github.com/google/timesketch/pull/973
* New UI build by berggren in https://github.com/google/timesketch/pull/978
* Remove Vagrant by berggren in https://github.com/google/timesketch/pull/979
* Doc fixes for sessionizers by katemacleod in https://github.com/google/timesketch/pull/975
* Session chart by katemacleod in https://github.com/google/timesketch/pull/974
* Session resource by katemacleod in https://github.com/google/timesketch/pull/971
* Remove multiple inheritance in test classes by nnyx7 in https://github.com/google/timesketch/pull/977
* Fixing aggregations in the API client by kiddinn in https://github.com/google/timesketch/pull/982
* Making changes to how aggregations are done in API client by kiddinn in https://github.com/google/timesketch/pull/983
* Minor bug in client. by kiddinn in https://github.com/google/timesketch/pull/984
* Adding aggregation into the jupyter notebook demo by kiddinn in https://github.com/google/timesketch/pull/985
* Empty states by berggren in https://github.com/google/timesketch/pull/986
* Only run linter on changed files by berggren in https://github.com/google/timesketch/pull/987
* Add tags to event list by berggren in https://github.com/google/timesketch/pull/988
* Update docker-compose to correct elasticsearch volume by exFill in https://github.com/google/timesketch/pull/990
* Minor client changes by kiddinn in https://github.com/google/timesketch/pull/992
* Adding the OSDFCon demo notebook to our sample notebooks. by kiddinn in https://github.com/google/timesketch/pull/993
* New filter system by berggren in https://github.com/google/timesketch/pull/991
* Add Buefy UI framework by berggren in https://github.com/google/timesketch/pull/995
* Fixed the TypeError: delimiter must be string, not unicode error. by wajihyassine in https://github.com/google/timesketch/pull/999
* Improving error handling in the API by kiddinn in https://github.com/google/timesketch/pull/1001
* Adding list sketches to the tsctl command by kiddinn in https://github.com/google/timesketch/pull/1002
* Refactor UI by berggren in https://github.com/google/timesketch/pull/1003
* Adding the ability to manually run an analyzer in the API by kiddinn in https://github.com/google/timesketch/pull/998
* New UI: Star events by berggren in https://github.com/google/timesketch/pull/1005
* New UI: Result limit and sort order by berggren in https://github.com/google/timesketch/pull/1006
* New UI: Comment support by berggren in https://github.com/google/timesketch/pull/1007
* Install documentation from plaso changed location by jaegeral in https://github.com/google/timesketch/pull/1008
* New UI: Context query by berggren in https://github.com/google/timesketch/pull/1011
* Introduce .dockerignore by au-phiware in https://github.com/google/timesketch/pull/1010
* API client methods for comment and label by jaegeral in https://github.com/google/timesketch/pull/693
* Introduce documentation how to import arbitrary data to ts by jaegeral in https://github.com/google/timesketch/pull/1009
* New UI: Pagination support by berggren in https://github.com/google/timesketch/pull/1012
* New UI: Sharing controls by berggren in https://github.com/google/timesketch/pull/1015
* Added import stream object for more flexible data upload by kiddinn in https://github.com/google/timesketch/pull/1004
* Fixing 1017 and one other minor issue. by kiddinn in https://github.com/google/timesketch/pull/1018
* New UI: Upload progress bar by berggren in https://github.com/google/timesketch/pull/1020
* Adding a chain analyzer. by kiddinn in https://github.com/google/timesketch/pull/994
* New UI: Run analyzers from the UI by berggren in https://github.com/google/timesketch/pull/1019
* Fixing bug in listing stored aggregators by kiddinn in https://github.com/google/timesketch/pull/1021
* New UI: Loading state for uploaded timelines by berggren in https://github.com/google/timesketch/pull/1022
* New UI: Just show delete menu if user has permission by berggren in https://github.com/google/timesketch/pull/1023
* New UI: Error toast and analyzer run permissions by berggren in https://github.com/google/timesketch/pull/1025
* Fixing a minor py2 vs py3 compatibility issue in OAUTH by kiddinn in https://github.com/google/timesketch/pull/1026
* Adding OAUTH support to API client. by kiddinn in https://github.com/google/timesketch/pull/1027
* Timestomp by fooris in https://github.com/google/timesketch/pull/942
* Changes to the OAUTH support for the client API by kiddinn in https://github.com/google/timesketch/pull/1030
* Changing the OAUTH flow in the client to add a web server to catch response by kiddinn in https://github.com/google/timesketch/pull/1031
* New UI: Selectable columns by berggren in https://github.com/google/timesketch/pull/1029
* Fix views in story mode by berggren in https://github.com/google/timesketch/pull/1032
* Bugfix for views without fields by berggren in https://github.com/google/timesketch/pull/1033
* Small bugfix for word wraps by berggren in https://github.com/google/timesketch/pull/1034
* Adding description and chart titles for aggregation. by kiddinn in https://github.com/google/timesketch/pull/1036
* Add description to aggregation dropdown by berggren in https://github.com/google/timesketch/pull/1037
* Adding aggregation information to the API and API client. by kiddinn in https://github.com/google/timesketch/pull/1038
* CSRF refresh snackbar by berggren in https://github.com/google/timesketch/pull/1040
* Cleaning up analyzer tags by berggren in https://github.com/google/timesketch/pull/1039
* New UI: Bugfix for sharing form by berggren in https://github.com/google/timesketch/pull/1041
* Bugfix: Do not strip domain when changing ACL by berggren in https://github.com/google/timesketch/pull/1042
* Splitting up parsing of large CSV files with the importer by kiddinn in https://github.com/google/timesketch/pull/1044
* Set correct value in option dropdown by berggren in https://github.com/google/timesketch/pull/1048
* Separating client classes into their own files. by kiddinn in https://github.com/google/timesketch/pull/1049
* New base dev image build by berggren in https://github.com/google/timesketch/pull/1050
* Adding the ability to store aggregation into analyzer interface by kiddinn in https://github.com/google/timesketch/pull/1051
* Fix duplicate sorting order in sketch explore sort order dropdown by vikahl in https://github.com/google/timesketch/pull/1054
* Enable new UI by berggren in https://github.com/google/timesketch/pull/1057
* Remove vagrant from the readme by jaegeral in https://github.com/google/timesketch/pull/1058
* Use development_timesketch instead of docker_timesketch by jaegeral in https://github.com/google/timesketch/pull/1059
* Change default location for config file by berggren in https://github.com/google/timesketch/pull/1061
* Added dynamic form definition for the feature extraction analyzer. by kiddinn in https://github.com/google/timesketch/pull/1055
* Always use HTTPS for OIDC redirects by berggren in https://github.com/google/timesketch/pull/1062
* New release 20191220 by berggren in https://github.com/google/timesketch/pull/1063

New Contributors
* piwikjapan made their first contribution in https://github.com/google/timesketch/pull/807
* althealabre made their first contribution in https://github.com/google/timesketch/pull/917
* taishi8117 made their first contribution in https://github.com/google/timesketch/pull/914
* pstirparo made their first contribution in https://github.com/google/timesketch/pull/918
* jadams made their first contribution in https://github.com/google/timesketch/pull/928
* Liamdoult made their first contribution in https://github.com/google/timesketch/pull/940
* exFill made their first contribution in https://github.com/google/timesketch/pull/990
* wajihyassine made their first contribution in https://github.com/google/timesketch/pull/999
* au-phiware made their first contribution in https://github.com/google/timesketch/pull/1010
* fooris made their first contribution in https://github.com/google/timesketch/pull/942
* vikahl made their first contribution in https://github.com/google/timesketch/pull/1054

**Full Changelog**: https://github.com/google/timesketch/compare/20190207...20191220

20190207
New release with updated analyzers, py3 support and bugfixes.

What's Changed
* Graph refactor by berggren in https://github.com/google/timesketch/pull/714
* The former wiki link no longer exists by jaegeral in https://github.com/google/timesketch/pull/703
* minor fixes for docker files by aguilajesus in https://github.com/google/timesketch/pull/698
* Update dependencies by berggren in https://github.com/google/timesketch/pull/715
* Bug fixes for the analyzers by berggren in https://github.com/google/timesketch/pull/717
* Development environment with Docker by berggren in https://github.com/google/timesketch/pull/718
* Update README.md by kovakina in https://github.com/google/timesketch/pull/719
* Human readable in the UI by berggren in https://github.com/google/timesketch/pull/721
* Enable debug and analyzers for development by berggren in https://github.com/google/timesketch/pull/722
* Update Vagrant script by Onager in https://github.com/google/timesketch/pull/726
* Overwrite size value for exported events. by aguilajesus in https://github.com/google/timesketch/pull/723
* Add Event_to_sketch in api by jaegeral in https://github.com/google/timesketch/pull/692
* Add emoji support in the UI and in analyzers by berggren in https://github.com/google/timesketch/pull/729
* Move emojis to the left by berggren in https://github.com/google/timesketch/pull/730
* Don't remove session when engine is created by berggren in https://github.com/google/timesketch/pull/731
* Set human readable strings by berggren in https://github.com/google/timesketch/pull/732
* Added a browser search sketch analyzer by kiddinn in https://github.com/google/timesketch/pull/733
* Add definitions for emojis by berggren in https://github.com/google/timesketch/pull/742
* Changed set_human_readable so that it does not overwrite previous data by kiddinn in https://github.com/google/timesketch/pull/744
* Moving parts of the similarity scorer to a separate library. by kiddinn in https://github.com/google/timesketch/pull/746
* Sketch analyzers chained and human_readable set to a list. by kiddinn in https://github.com/google/timesketch/pull/749
* Update Installation.md by weichea in https://github.com/google/timesketch/pull/759
* Only create saved view if there are hits by berggren in https://github.com/google/timesketch/pull/756
* Upgrade urllib3 due to security fix by berggren in https://github.com/google/timesketch/pull/752
* Run index analyzers in a chain by berggren in https://github.com/google/timesketch/pull/751
* Verbose View with new human_readable UI by kiddinn in https://github.com/google/timesketch/pull/754
* New DB engine per celery worker by berggren in https://github.com/google/timesketch/pull/755
* Added a phishy domain analyzer by kiddinn in https://github.com/google/timesketch/pull/761
* Changed the emoji library to include helper text by kiddinn in https://github.com/google/timesketch/pull/762
* Emoji tooltips by berggren in https://github.com/google/timesketch/pull/764
* Only create one view by berggren in https://github.com/google/timesketch/pull/765
* Added dependencies into analyzers to affect ordering they are run in. by kiddinn in https://github.com/google/timesketch/pull/767
* Simple domain analyzer by berggren in https://github.com/google/timesketch/pull/766
* UI polish for the new year by berggren in https://github.com/google/timesketch/pull/768
* Fix links in user guide by obsidianforensics in https://github.com/google/timesketch/pull/769
* New importer in tsctl by berggren in https://github.com/google/timesketch/pull/770
* Adding the ability to request return fields in the API. by kiddinn in https://github.com/google/timesketch/pull/771
* Small refactor of tsctl by berggren in https://github.com/google/timesketch/pull/772
* Email notification for imports by berggren in https://github.com/google/timesketch/pull/773
* Email send bugfix by berggren in https://github.com/google/timesketch/pull/775
* Do not require SERVER_NAME to be set for URL construction by berggren in https://github.com/google/timesketch/pull/776
* Updating search filter limit to match new ES filters. by kiddinn in https://github.com/google/timesketch/pull/777
* ES py client 6x support and pyyaml update by berggren in https://github.com/google/timesketch/pull/778
* Added few more domains into known whitelist and added another view in phishy domains by kiddinn in https://github.com/google/timesketch/pull/779
* Fixed a bug in the jsonl importer. by kiddinn in https://github.com/google/timesketch/pull/780
* Tag known CDN domains by berggren in https://github.com/google/timesketch/pull/781
* Adding a login analyzer. by kiddinn in https://github.com/google/timesketch/pull/783
* Added a feature extraction analyzer by kiddinn in https://github.com/google/timesketch/pull/785
* Added pandas support into the API and analyzers interface. by kiddinn in https://github.com/google/timesketch/pull/787
* Added scrolling support to API calls by kiddinn in https://github.com/google/timesketch/pull/791
* New API client release by berggren in https://github.com/google/timesketch/pull/792
* Changed the login analyzer's logon event parsing. by kiddinn in https://github.com/google/timesketch/pull/794
* Minor bugs in the client library as well as adding timeline name + proper datetime by kiddinn in https://github.com/google/timesketch/pull/796
* Removing BeautifulSoup as a dependency in favor of bs4 by kiddinn in https://github.com/google/timesketch/pull/799
* Added a colab notebook that demos TS/colab connections, also added a badge to the README by kiddinn in https://github.com/google/timesketch/pull/793
* Added a jupyter demo notebook. by kiddinn in https://github.com/google/timesketch/pull/797
* Upgrading colab notebook to python3 by kiddinn in https://github.com/google/timesketch/pull/800
* Removed BeautifulSoup from requirements by kiddinn in https://github.com/google/timesketch/pull/801
* Added mybinder config to TS, making it possible to run jupyterlab notebooks. by kiddinn in https://github.com/google/timesketch/pull/802
* Analyzer index performance fix by berggren in https://github.com/google/timesketch/pull/803
* Fix missing volume for docker-compose by berggren in https://github.com/google/timesketch/pull/804
* Minor change in import. by kiddinn in https://github.com/google/timesketch/pull/808
* Pagination bug fix by berggren in https://github.com/google/timesketch/pull/810
* Fix for docker-compose bug by berggren in https://github.com/google/timesketch/pull/809
* Extract Usernames or Account Email Addresses (745) by obsidianforensics in https://github.com/google/timesketch/pull/795
* Added a browser timeframe analyzer plugin by kiddinn in https://github.com/google/timesketch/pull/811
* Bug fixes by kiddinn in https://github.com/google/timesketch/pull/812
* Add pandas to setup.py by tomchop in https://github.com/google/timesketch/pull/815
* Update docker-entrypoint.sh by Tango43 in https://github.com/google/timesketch/pull/817
* Changes for Python 3 compatibility by Onager in https://github.com/google/timesketch/pull/813
* Remove unused dep (pycypher) and small bugfix for heatmap by berggren in https://github.com/google/timesketch/pull/824
* tests(travis): remove deprecated option by RDIL in https://github.com/google/timesketch/pull/784
* Cleanup the last remaining u'' by berggren in https://github.com/google/timesketch/pull/827
* Update to Ubuntu 18.04 for both Docker and Vagrant by berggren in https://github.com/google/timesketch/pull/825
* New release version - 20190207 by berggren in https://github.com/google/timesketch/pull/826

New Contributors
* weichea made their first contribution in https://github.com/google/timesketch/pull/759
* Tango43 made their first contribution in https://github.com/google/timesketch/pull/817
* RDIL made their first contribution in https://github.com/google/timesketch/pull/784

**Full Changelog**: https://github.com/google/timesketch/compare/20181116...20190207

20181116
Timesketch release 20181116

What's Changed
* Introduce add events manually in documentation by jaegeral in https://github.com/google/timesketch/pull/634
* Redline Import in tsctl by jaegeral in https://github.com/google/timesketch/pull/603
* Mention how to change a users password by jaegeral in https://github.com/google/timesketch/pull/639
* Make fields reqiured in add event form by berggren in https://github.com/google/timesketch/pull/636
* Add pyyaml dependency by ecapuano in https://github.com/google/timesketch/pull/650
* Google OpenID Connect authentication support by berggren in https://github.com/google/timesketch/pull/629
* Add PyYAML dependency by berggren in https://github.com/google/timesketch/pull/656
* Elasticsearch 6.x support by berggren in https://github.com/google/timesketch/pull/659
* Update bundle by berggren in https://github.com/google/timesketch/pull/660
* normalize datetime and timestamp from csv file import. by aguilajesus in https://github.com/google/timesketch/pull/661
* Close DB session by berggren in https://github.com/google/timesketch/pull/667
* docs(readme): update readme.md by bhavya9107 in https://github.com/google/timesketch/pull/680
* Fix: Overflow bug in the list of timelines UI by berggren in https://github.com/google/timesketch/pull/681
* Graph cleanup - preparation for new UI and auto analysis by berggren in https://github.com/google/timesketch/pull/689
* Automatic analysis tasks by berggren in https://github.com/google/timesketch/pull/663
* Max CSV field size by berggren in https://github.com/google/timesketch/pull/679
* add microseconds if present in datetime field by aguilajesus in https://github.com/google/timesketch/pull/670
* export all fields on export 657 by aguilajesus in https://github.com/google/timesketch/pull/678
* add _index to csv export by aguilajesus in https://github.com/google/timesketch/pull/699
* Adding search query guide and screenshots by kovakina in https://github.com/google/timesketch/pull/651
* Make sure sketch analyzers are run after indexing. by berggren in https://github.com/google/timesketch/pull/704
* Enable similarity UI element by berggren in https://github.com/google/timesketch/pull/709
* Restore ability to specify other delimiter character in csv imports. by jaegeral in https://github.com/google/timesketch/pull/708
* New release 20181116 by berggren in https://github.com/google/timesketch/pull/712

New Contributors
* ecapuano made their first contribution in https://github.com/google/timesketch/pull/650
* bhavya9107 made their first contribution in https://github.com/google/timesketch/pull/680

**Full Changelog**: https://github.com/google/timesketch/compare/20180613...20181116

20180613
Timesketch release 20180613

**Full Changelog**: https://github.com/google/timesketch/compare/20180612...20180613

20180612
Version 20180612 of Timesketch

What's Changed
* Update Docker README and move from wiki to repo by witoff in https://github.com/google/timesketch/pull/375
* SearchIndex in API client by berggren in https://github.com/google/timesketch/pull/376
* Make vagrant bootstrap script more idempotent. by franekp in https://github.com/google/timesketch/pull/378
* Move docs to repo. by franekp in https://github.com/google/timesketch/pull/379
* Custom error message for HTTP bad (400) requests by berggren in https://github.com/google/timesketch/pull/381
* Format Python code with yapf by berggren in https://github.com/google/timesketch/pull/387
* Collapse apt-get and pip invocations in bootstrap.sh by franekp in https://github.com/google/timesketch/pull/389
* Add frontend build pipeline by franekp in https://github.com/google/timesketch/pull/390
* Create search indices and timelines by berggren in https://github.com/google/timesketch/pull/380
* Fix IndexError in ResourceMixin.to_json by franekp in https://github.com/google/timesketch/pull/404
* Add support for HTTP basic authentication to the API client by csash in https://github.com/google/timesketch/pull/403
* Pin python dependencies by franekp in https://github.com/google/timesketch/pull/406
* Deduplicate information about contributing. by franekp in https://github.com/google/timesketch/pull/407
* Clean up misplaced executable permissions. by franekp in https://github.com/google/timesketch/pull/408
* Workaround a bug that sometimes causes pip-sync to delete pkg_resources. by franekp in https://github.com/google/timesketch/pull/411
* fix Upload docs by pettai in https://github.com/google/timesketch/pull/412
* Rewrite test script to python. Invoke it from .travis.yml. Add some docs. by franekp in https://github.com/google/timesketch/pull/413
* Refactor + align project structure with Angular 2 conventions. by franekp in https://github.com/google/timesketch/pull/415
* Add simple navigation component in Angular 2 by franekp in https://github.com/google/timesketch/pull/416
* Add TSLint by franekp in https://github.com/google/timesketch/pull/417
* Use more Angular 2 style guide. by franekp in https://github.com/google/timesketch/pull/422
* Fix non-determinism in SketchListResourceTest. by franekp in https://github.com/google/timesketch/pull/424
* Add frontend unit tests with Karma and PhantomJS. by franekp in https://github.com/google/timesketch/pull/423
* Just decode strings by berggren in https://github.com/google/timesketch/pull/418
* Add angular-specific linter. by franekp in https://github.com/google/timesketch/pull/426
* Fix navigation bar broken in 422 by franekp in https://github.com/google/timesketch/pull/429
* Add info about running tests to developers guide. by franekp in https://github.com/google/timesketch/pull/430
* Fix Angular bootstrap broken in 423 by franekp in https://github.com/google/timesketch/pull/439
* align navigation menu by berggren in https://github.com/google/timesketch/pull/440
* Wrap text when too long by berggren in https://github.com/google/timesketch/pull/443
* Remove container block by berggren in https://github.com/google/timesketch/pull/445
* Support new Plaso (20170930 aka Heimdall) by berggren in https://github.com/google/timesketch/pull/449
* Graph entities and registry by berggren in https://github.com/google/timesketch/pull/453
* Nested aggregations by berggren in https://github.com/google/timesketch/pull/447
* Graph visualization - initial code by franekp in https://github.com/google/timesketch/pull/451
* Graph generation - initial version without celery job. by franekp in https://github.com/google/timesketch/pull/463
* Adjust graph metadata. by franekp in https://github.com/google/timesketch/pull/464
* Few unrelated small fixes. by franekp in https://github.com/google/timesketch/pull/466
* Add ES queries and ES index to all edges by berggren in https://github.com/google/timesketch/pull/465
* Graphs: use label templates in frontend. by franekp in https://github.com/google/timesketch/pull/467
* Update unit tests after graph labels change. by franekp in https://github.com/google/timesketch/pull/469
* Change default zoom levels by berggren in https://github.com/google/timesketch/pull/473
* UI for graph creation. by franekp in https://github.com/google/timesketch/pull/474
* Add timestamps to edges by berggren in https://github.com/google/timesketch/pull/471
* Fix memory leak - destroy Cytoscape instances when not used. by franekp in https://github.com/google/timesketch/pull/477
* Minor ui changes by berggren in https://github.com/google/timesketch/pull/478
* Predefined queries by berggren in https://github.com/google/timesketch/pull/479
* Move hard-coded values from graph-view.component to graph-view.data by franekp in https://github.com/google/timesketch/pull/480
* Move predefined queries from cypher-query.component to cypher-query.data by franekp in https://github.com/google/timesketch/pull/481
* [WIP] Add sidebar. by franekp in https://github.com/google/timesketch/pull/482
* Show event list next to graph. by franekp in https://github.com/google/timesketch/pull/483
* Graph styling by berggren in https://github.com/google/timesketch/pull/485
* Closest neighbours by berggren in https://github.com/google/timesketch/pull/486
* Fix stale data being rendered in Cytoscape. by franekp in https://github.com/google/timesketch/pull/488
* Change sidebar background. by franekp in https://github.com/google/timesketch/pull/489
* Transpile cypher queries. by franekp in https://github.com/google/timesketch/pull/487
* Load jquery before angular by berggren in https://github.com/google/timesketch/pull/492
* Include graph .cql script by berggren in https://github.com/google/timesketch/pull/493
* less whitespace by berggren in https://github.com/google/timesketch/pull/494
* e2e test script by berggren in https://github.com/google/timesketch/pull/495
* Add plaso test by berggren in https://github.com/google/timesketch/pull/496
* Similarity experiment by berggren in https://github.com/google/timesketch/pull/500
* Update install instructions for ES 5.x by csash in https://github.com/google/timesketch/pull/501
* Add direct link to specific event (414) by csash in https://github.com/google/timesketch/pull/503
* Ingestion progress indication by berggren in https://github.com/google/timesketch/pull/504
* Update link to Daemonizing Celery workers by adamjnichols in https://github.com/google/timesketch/pull/506
* Update Installation.md by adamjnichols in https://github.com/google/timesketch/pull/509
* Typo on 85 by kant in https://github.com/google/timesketch/pull/510
* Addition of JSONL upload capability by adamjnichols in https://github.com/google/timesketch/pull/511
* Vagrant tweaks by adamjnichols in https://github.com/google/timesketch/pull/515
* Add Python API functions for annotating events and searching a timeline by annotation 🤘🏻 by tomchop in https://github.com/google/timesketch/pull/517
* Apply config file host+port by adamjnichols in https://github.com/google/timesketch/pull/519
* Vagrant permission fixes by adamjnichols in https://github.com/google/timesketch/pull/523
* New color theme by berggren in https://github.com/google/timesketch/pull/524
* Fix navigation bug by berggren in https://github.com/google/timesketch/pull/525
* Use UgliFyJS to minimize bundle by berggren in https://github.com/google/timesketch/pull/526
* Add SVG logo by berggren in https://github.com/google/timesketch/pull/527
* Mention the disksize plugin by jaegeral in https://github.com/google/timesketch/pull/529
* Surface celery task errors by berggren in https://github.com/google/timesketch/pull/530
* Docker overhaul/update by adamjnichols in https://github.com/google/timesketch/pull/520
* Upgrade to jquery 3.0.0 by berggren in https://github.com/google/timesketch/pull/532
* Don't delete index on error by berggren in https://github.com/google/timesketch/pull/533
* CSV jsonl error handling - git bananza by berggren in https://github.com/google/timesketch/pull/535
* Show labels for labeled events by tomchop in https://github.com/google/timesketch/pull/538
* Changed test file format to sqlite; included derivative csv file by adamjnichols in https://github.com/google/timesketch/pull/537
* Add support for CSV files using non-standard delimiters by adamjnichols in https://github.com/google/timesketch/pull/539
* Ignore node_modules via .pylintrc by Androbin in https://github.com/google/timesketch/pull/540
* Event pagination by adamjnichols in https://github.com/google/timesketch/pull/541
* Refactor models views by berggren in https://github.com/google/timesketch/pull/542
* Refactor api routes by berggren in https://github.com/google/timesketch/pull/543
* Fix for CSV issue 548 by adamjnichols in https://github.com/google/timesketch/pull/549
* set task arguments based on file extension 555 by aguilajesus in https://github.com/google/timesketch/pull/556
* e2e tests fix by berggren in https://github.com/google/timesketch/pull/553
* Update momentjs by berggren in https://github.com/google/timesketch/pull/561
* Strip domain from username if present by berggren in https://github.com/google/timesketch/pull/551
* Pagination UI fix by berggren in https://github.com/google/timesketch/pull/562
* Show labels for labeled events by tomchop in https://github.com/google/timesketch/pull/572
* Don't build pager when there are no results by berggren in https://github.com/google/timesketch/pull/573
* Remove unused abstraction base class by berggren in https://github.com/google/timesketch/pull/574
* Enable file import/export support for search templates. by aguilajesus in https://github.com/google/timesketch/pull/576
* add label support to search templates by aguilajesus in https://github.com/google/timesketch/pull/577
* Update setup.py by adamjnichols in https://github.com/google/timesketch/pull/583
* Don't trample local OS PIP by adamjnichols in https://github.com/google/timesketch/pull/588
* Enable upload by default when using Vagrant by berggren in https://github.com/google/timesketch/pull/593
* Consistent null state by berggren in https://github.com/google/timesketch/pull/594
* Show all active timelines by berggren in https://github.com/google/timesketch/pull/595
* Fixed a typo by jaegeral in https://github.com/google/timesketch/pull/597
* Parameterize Timesketch authentication with docker-compose by Onager in https://github.com/google/timesketch/pull/598
* User guide first version by jaegeral in https://github.com/google/timesketch/pull/599
* little modification in installation howto by jaegeral in https://github.com/google/timesketch/pull/604
* Add MICROSECONDS_PER_SECOND to definitions by berggren in https://github.com/google/timesketch/pull/606
* Adding the users guide to README.md by jaegeral in https://github.com/google/timesketch/pull/611
* check status from elastic by jaegeral in https://github.com/google/timesketch/pull/608
* clean code. delete unused comma by OhBonsai in https://github.com/google/timesketch/pull/610
* Add events manually by adamjnichols in https://github.com/google/timesketch/pull/587
* Fix broken context query by berggren in https://github.com/google/timesketch/pull/619
* Google IAP/OIDC authentication support by berggren in https://github.com/google/timesketch/pull/617
* Close DB session in tasks by berggren in https://github.com/google/timesketch/pull/612
* Rename cypher lib dir by berggren in https://github.com/google/timesketch/pull/613
* Version 20180612 by berggren in https://github.com/google/timesketch/pull/630

New Contributors
* franekp made their first contribution in https://github.com/google/timesketch/pull/378
* pettai made their first contribution in https://github.com/google/timesketch/pull/412
* adamjnichols made their first contribution in https://github.com/google/timesketch/pull/506
* kant made their first contribution in https://github.com/google/timesketch/pull/510
* Androbin made their first contribution in https://github.com/google/timesketch/pull/540
* OhBonsai made their first contribution in https://github.com/google/timesketch/pull/610

**Full Changelog**: https://github.com/google/timesketch/compare/20170721...20180612

20170721
Version 20170721 of Timesketch

What's Changed
* Update to make compatible with Plaso 1.5 RC1 by Onager in https://github.com/google/timesketch/pull/198
* 199 task bug by berggren in https://github.com/google/timesketch/pull/200
* Don't show closed sketches in the overview by berggren in https://github.com/google/timesketch/pull/205
* Better url query and UI fix by berggren in https://github.com/google/timesketch/pull/224
* Better charts by berggren in https://github.com/google/timesketch/pull/225
* View from selected events and editable views by berggren in https://github.com/google/timesketch/pull/204
* Save view when created from URL parameters by berggren in https://github.com/google/timesketch/pull/227
* Validate filters by berggren in https://github.com/google/timesketch/pull/229
* D3 by vlejd in https://github.com/google/timesketch/pull/231
* Minor UI tweak - display a "no results" message (instead of "Welcome … by csash in https://github.com/google/timesketch/pull/240
* Fix for 243 (update current_app imports) / update one FlaskWTF import in forms by csash in https://github.com/google/timesketch/pull/244
* Bring back context queries by berggren in https://github.com/google/timesketch/pull/251
* 217 search templates by berggren in https://github.com/google/timesketch/pull/233
* CSV upload by berggren in https://github.com/google/timesketch/pull/265
* UI dashboard polish by berggren in https://github.com/google/timesketch/pull/266
* Fix bug with using the wrong app context by berggren in https://github.com/google/timesketch/pull/268
* Remove depricated search feature when adding timelines by berggren in https://github.com/google/timesketch/pull/270
* Roll back task fix. Not needed anymore. by berggren in https://github.com/google/timesketch/pull/271
* Add app context to db operations in CSV task by berggren in https://github.com/google/timesketch/pull/272
* Consistent UI by berggren in https://github.com/google/timesketch/pull/275
* Sketch upload by berggren in https://github.com/google/timesketch/pull/277
* Vagrant support by berggren in https://github.com/google/timesketch/pull/279
* Timesketch org site by berggren in https://github.com/google/timesketch/pull/280
* Generate new site by berggren in https://github.com/google/timesketch/pull/281
* Better navigation by berggren in https://github.com/google/timesketch/pull/283
* Sort view dropdown alphabetically by berggren in https://github.com/google/timesketch/pull/285
* Read only stories by berggren in https://github.com/google/timesketch/pull/287
* Export up to 10k events by berggren in https://github.com/google/timesketch/pull/284
* Remove data_type filter picker by berggren in https://github.com/google/timesketch/pull/291
* Delete timelines by berggren in https://github.com/google/timesketch/pull/288
* Upload enhancements by berggren in https://github.com/google/timesketch/pull/289
* Small UI changes by berggren in https://github.com/google/timesketch/pull/305
* Add requirements file by berggren in https://github.com/google/timesketch/pull/309
* Streaming query results by berggren in https://github.com/google/timesketch/pull/307
* Create timestamp from datetime string when importing CSV by tomchop in https://github.com/google/timesketch/pull/300
* Bugfix by tomchop in https://github.com/google/timesketch/pull/313
* Delete timeline permanently by berggren in https://github.com/google/timesketch/pull/312
* Add Docker Support by witoff in https://github.com/google/timesketch/pull/324
* Dynamic timefilter by rbdebeer-zz in https://github.com/google/timesketch/pull/314
* Update __init__.py by berggren in https://github.com/google/timesketch/pull/326
* Add Docker Support by witoff in https://github.com/google/timesketch/pull/328
* Move the upload form to the timelines pane by berggren in https://github.com/google/timesketch/pull/332
* Show supported Plaso version if upload is enabled by berggren in https://github.com/google/timesketch/pull/335
* Move docker files by berggren in https://github.com/google/timesketch/pull/343
* Change to Text column type by berggren in https://github.com/google/timesketch/pull/345
* Ts dynamic timefilter patches by rbdebeer-zz in https://github.com/google/timesketch/pull/352
* upgrade to docker-compose v3 and fix docker support by witoff in https://github.com/google/timesketch/pull/354
* Graph backend support by berggren in https://github.com/google/timesketch/pull/349
* Python API client library by berggren in https://github.com/google/timesketch/pull/348
* Celery support in Vagrant by berggren in https://github.com/google/timesketch/pull/356
* Elasticsearch 5.x support by berggren in https://github.com/google/timesketch/pull/350
* es5 in vagrant by berggren in https://github.com/google/timesketch/pull/358
* Neo4j in Vagrant by berggren in https://github.com/google/timesketch/pull/360
* Remove depricated search_type by berggren in https://github.com/google/timesketch/pull/363
* Only show share button if owner by berggren in https://github.com/google/timesketch/pull/365
* ACL should be RO when public by berggren in https://github.com/google/timesketch/pull/367

New Contributors
* vlejd made their first contribution in https://github.com/google/timesketch/pull/231
* rbdebeer-zz made their first contribution in https://github.com/google/timesketch/pull/314

**Full Changelog**: https://github.com/google/timesketch/compare/2016.7...20170721

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

HIGH 7.5

CVSS v3 Details

HIGH 7.5
Attack Vector (AV)
NETWORK
Attack Complexity (AC)
LOW
Privileges Required (PR)
NONE
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality Impact (C)
NONE
Integrity Impact (I)
HIGH
Availability Availability (A)
NONE

CVSS v2 Details

MEDIUM 5.0
Access Vector (AV)
NETWORK
Access Complexity (AC)
LOW
Authentication (Au)
NONE
Confidentiality Impact (C)
NONE
Integrity Impact (I)
PARTIAL
Availability Impact (A)
NONE